CIS 2015 SAML-IN / SAML-OUT - Scott Tomilson & John Dasilva

•

1 like•710 views

Are you in a situation where you have two business units (maybe because of a merger) that have their own Federation solutions and now you need to share access to SaaS resources among the 2 workforces. But you don't want to have to setup to separate SaaS connections to the same vendor and you want to manage this connection on premises instead of in the Cloud. We can help with that, come see how!

SAML-IN / SAML-OUT
Scott Tomilson
John DaSilva

Copyright © 2015 Cloud Identity Summit. All rights reserved. 2
Building Federated Relationships
Your AppsYour Partners
Acme
Beta
Com
SAML ✔
SAML ✔
SAML ✔
Fox
Echo
Delta

Copyright © 2015 Cloud Identity Summit. All rights reserved. 3
Groundhog
Day
“It’s always February 2nd, and there’s nothing you can do about it.”“It’s always SSO Day, and there’s nothing you can do about it.”

Copyright © 2015 Cloud Identity Summit .All rights reserved. 4Copyright © 2015 Cloud Identity Summit. All rights reserved. 4
Give me
SSO!!

Copyright © 2015 Cloud Identity Summit. All rights reserved. 5
Building Federated Relationships
Your AppsYour Partners
Acme
Beta
Com
SAML
SAML
SAML
Federation Hub

Extending Federation Capabilities
SSO
WS-Fed
Login
Acme

Extending Federation Capabilities
SSO
WS-Fed
Login
1 Protocol
1 Partner
Acme

Extending Federation Capabilities
SSO
WS-Fed
Login
1 Protocol
1 Partner
Q: How can you extend your SharePoint environment to additional business partners?
Acme

Extending Federation Capabilities
SSO
WS-Fed
Federation Hub

Extending Federation Capabilities
SSO
WS-Fed
Login
WS-FedAcme
Federation Hub

Extending Federation Capabilities
SSO
WS-Fed
Federation Hub
Login
WS-Fed
Login
Login
SAML
SAML
Acme
Beta
Com
… this could easily be any app constrained to a 1 IdP configuration

Federation Protocol Translation
SSO
to SP
SSO
From IdPs
Translate From Translate To
SAML SAML
SAML WS-Fed
WS-Fed SAML
WS-Fed WS-Fed
SAML OpenID Connect
WS-Fed OpenID Connect

Copyright © 2015 Cloud Identity Summit. All rights reserved. 13
Moving to Next Gen Identity
Your AppsYour Partners
Acme
Beta
Com
OpenID
Connect
Federation Hub
OpenID
Connect
OpenID
Connect
SAML

Copyright © 2015 Cloud Identity Summit .All rights reserved. 14Copyright © 2015 Cloud Identity Summit. All rights reserved. 14
Holy
SSO!!

Are you asking yourself how do I take my inhouse application and make it available to internal users, partners or customers using SSO and access management technologies? Oh, and you don't want it to be a 6 month project? No problem. Come and find out how to leverage your existing investments and move to modern standards like OpenID Connect, without having to rip and replace infrastructure. Learn the capabilities and tradeoffs you can make to deploy the right level of identity and access management infrastructure to match your security needs.

CIS 2015 SSO for Mobile and Web Apps Ashish Jain

CloudIDSummit

CIS 2015 Session Management at Scale - Scott Tomilson & Jamshid Khosravian

CloudIDSummit

Centralized session management has long been a goal of Web Access Management systems: the idea that one session can give end users access to dozens of protected applications with a seamless SSO experience, and terminating it (either by the end user themselves, or by an administrator) cuts off access instantly. It’s a nice dream isn’t it? Turns out that while most WAM products claim they can do this, when deployment time comes around (especially in globally distributed organizations) serious security and scalability challenges emerge that make it unfeasible. In this “session”, come and learn our vision for deploying session management at scale and see how Ping Identity has implemented it in our Federated Access Management solution.

OAuth-as-a-service using ASP.NET Web API and Windows Azure Access ControlMaarten Balliauw

Bigger, Better Business With OAuth

Apigee | Google Cloud

OAuth is more than an authentication protocol. A decade from now, OAuth will be viewed as the great enabler of new business models and wealth creation in the app economy. In this session we'll investigate why many business development ideas don't make it past the whiteboard and how OAuth changes that. We'll tickle our imaginations and explore what is possible in a world where crossing trust boundaries is done with lower risk, more control and higher security. We Will Discuss » - Blockers to Business Innovation - How OAuth Changes the Rules - Re-Imagining the Future of Business Development

SecureAuth Solution Enhancements in 2017

SecureAuth

DevOps & Apps - Building and Operating Successful Mobile AppsApigee | Google Cloud

WSO2Con ASIA 2016: Case Study: Identity in the WSO2 Ecosystem

WSO2

The WSO2 ecosystem consists of several types of identities with different characteristics. Among them are customer identities, open-source community identities and the employee identities. The objective of this project was to design and implement a secure, state of the art identity and access management (IAM) system using WSO2 technology. There are many systems in WSO2 that require authentication, authorization and provisioning. Users have to maintain many complex passwords; administrators have to manage a large number of authorizations and provisioning. Another problem with current architecture is that it is tightly bound to email addresses. If the user changes the email address, his identity will be lost. This session will discuss how we built a state of the art identity and access management program that addresses the above problems using WSO2 Identity Server.

It is a fact of life for companies large and small today – employees are using their personal devices to access corporate resources. Addressing BYOD enterprise mobile access is no longer a nice to have, it is an imperative. This session will cover the advanced capabilities available in the Kaseya BYOD suite, including support for multiple document data sources, partitioning access based on AD group membership and other advanced administration topics. With a focus on addressing real-world needs, you will learn how to extract the maximum value from this innovative solution.

Advanced Administration: Mobile Device Management

Kaseya

Enhance the management of your corporate mobile assets with increased visibility and control across device types, applications and configuration. In this session, you will learn about new ways to leverage the MDM capabilities in Kaseya to provide multiple layers of security for the mobile context. From advanced OS-specific profiles, to strategies for managing applications and network settings, you will gain insights into how to get the most out of the MDM services at your disposal in Kaseya Virtual System Administrator (VSA).

Mule esb stripe

D.Rajesh Kumar

Internet of Things (IoT) and Microsoft Lync

Matthew Proctor

WSO2Con EU 2016: Identity Management – A Cornerstone for the Connected Enter...

WSO2

Ever since the turn of the century, the IT industry is discussing new economic models powered by the omnipresent internet connectivity. Enterprises are no longer at the heart of the traditional value chain, but woven in an intricate, often dynamic web of suppliers, partners, customers and authorities. With all these dynamics, identity management becomes an increasingly important asset. In this session Hans explains how WSO2’s unique platform strategy is an excellent fit for those companies that are opening up to the reality of a connected enterprises. Vattenfall, one of Europe’s largest generators of electricity, has used this technology to migrate from multiple existing identity stores with different technologies, to centralized stores managed by the WSO2 Identity Server. With the new platform, Vattenfall has modernized its identity infrastructure by leveraging its cloud first strategy and significantly lowering its cost of ownership.

Best Practices for API Security

MuleSoft

APIs have become a strategic necessity for your business. They facilitate agility and innovation. However, the financial incentive associated with this agility is often tempered with the fear of undue exposure of the valuable information that these APIs expose. With data breaches now costing $400m or more, senior IT decision makers are right to be concerned about API security. In this SlideShare, you'll learn: -The top API security concerns -How the IT industry is dealing with those concerns -How Anypoint Platform ensures the three qualifications needed to keep APIs secure

Security and Backup I: OEM Architecture

Kaseya

What sets Kaseya’s software platform apart from stand-alone solutions is the embedded integration approach. Kaseya’s VSA embeds industry-leading Security and Backup solutions from OEM partners, providing complete endpoint protection from malicious software and easy data protection and recovery, all managed from the central Kaseya web-based console. This session will provide you with a thorough understanding of the OEM architecture design and the integration of these key elements in Kaseya’s single-pane of glass.

Building an SSO platform in php (Zendcon 2010)

Ivo Jansch

How APIs Can Be Secured in Mobile Environments

WSO2

To view recording of this webinar please use below URL: http://wso2.com/library/webinars/2015/08/how-apis-can-be-secured-in-mobile-environments/ In this session, Shan, director of mobile architecture at WSO2 will discuss: What makes mobile API authentication different from traditional API authentication Best practices for implementing mobile API security What WSO2 API Manager provides for mobile developers

CIS14: PingAccess in Action

CloudIDSummit

Skype for Business User Group August 2015

Matthew Proctor

The Case For Next Generation IAM

Patrick Harding

My presentation from Gartner IAM 2014. "As connected devices dominate the enterprise thanks to cloud and mobile, legacy identity access management solutions are failing to keep up. Companies are realizing the benefits of next generation IAM to make authentication a seamless process for IT and end users alike. In this session, Patrick Harding, CTO of Ping Identity, will provide an overview of the six pillars of the next generation IAM and make a case for why it’s time to embrace a new era of IAM."

The end of polling : why and how to transform a REST API into a Data Streamin...

Audrey Neveu

We know interactivity is the key to keep our user’s interest alive but we can’t reduce animation to UI anymore. Twitter, Waze, Slack… users are used to have real-time data in applications they love. But how can you turn your static API into a stream of data? When talking about data streaming, we often think about WebSockets. But have you ever heard of Server-Sent Events? In this tools-in-action we will compare both technologies to understand which one you should opt for depending on your usecase and I’ll show you how we have been even further by reducing the amount of data to transfer with JSON-Patch. And because real-time data is not only needed by web (and because it’s much more fun), I’ll show you how we can make drone dance on streamed APIs.

Enterprise Mobility Management II: BYOD Tips, Tricks and Techniques

Kaseya

The BYOD phenomenon is impacting all organizations. It is no longer a choice whether to ‘allow’ BYOD within the organization – it is happening, and organizations need to figure out how to manage it – fast. With the recent release of Kaseya BYOD Suite, we want to share with you the many ways organizations can harness BYOD to not only secure and manage corporate data, but to drive new value for the organization. We will cover many ways to use the full power of this using examples from actual customer deployments. Come to learn how you can get up and running in minutes and solving this critical IT service need.

Adapt or Die DevJam: San Francisco, Sept 27 2016

Apigee | Google Cloud

CIS 2015- Beyond Federation Protocols- Praerit Garg

CloudIDSummit

In the last 10yrs, our Industry has done a great job defining standards and protocols on federating identities across boundaries. However, at cloud scale, there are still some gaps for distributed and multi-tenant applications. In this presentation, Praerit will explore the current situation with the audience; explore some of the more complex problems around use of identities within applications; and provide insight into some of the work being done in AWS to address these gaps.

KMWorld Roundtable - Social Networks for Business Success, An Open Source Per...

rivetlogic

What's hot

Managing Identities in the World of APIs

Apigee | Google Cloud

OAuth - Don’t Throw the Baby Out with the Bathwater Apigee | Google Cloud

Platform Security that will Last for Decades (Travis Spencer)

Nordic APIs

Sencha Space review

Grgur Grisogono

Secure and Optimize APIs using Azure API Management

BizTalk360

Advanced Administration: Kaseya BYOD Suite

Kaseya

Advanced Administration: Mobile Device Management

Kaseya

Mule esb stripe

D.Rajesh Kumar

Internet of Things (IoT) and Microsoft Lync

Matthew Proctor

WSO2Con EU 2016: Identity Management – A Cornerstone for the Connected Enter...

WSO2

Best Practices for API Security

MuleSoft

Security and Backup I: OEM Architecture

Kaseya

Building an SSO platform in php (Zendcon 2010)

Ivo Jansch

How APIs Can Be Secured in Mobile Environments

WSO2

CIS14: PingAccess in Action

CloudIDSummit

Skype for Business User Group August 2015

Matthew Proctor

The Case For Next Generation IAM

Patrick Harding

The end of polling : why and how to transform a REST API into a Data Streamin...

Audrey Neveu

Enterprise Mobility Management II: BYOD Tips, Tricks and Techniques

Kaseya

Adapt or Die DevJam: San Francisco, Sept 27 2016

Apigee | Google Cloud

What's hot (20)

Managing Identities in the World of APIs

OAuth - Don’t Throw the Baby Out with the Bathwater

Platform Security that will Last for Decades (Travis Spencer)

Sencha Space review

Secure and Optimize APIs using Azure API Management

Advanced Administration: Kaseya BYOD Suite

Advanced Administration: Mobile Device Management

Mule esb stripe

Internet of Things (IoT) and Microsoft Lync

WSO2Con EU 2016: Identity Management – A Cornerstone for the Connected Enter...

Best Practices for API Security

Security and Backup I: OEM Architecture

Building an SSO platform in php (Zendcon 2010)

How APIs Can Be Secured in Mobile Environments

CIS14: PingAccess in Action

Skype for Business User Group August 2015

The Case For Next Generation IAM

The end of polling : why and how to transform a REST API into a Data Streamin...

Enterprise Mobility Management II: BYOD Tips, Tricks and Techniques

Adapt or Die DevJam: San Francisco, Sept 27 2016

Similar to CIS 2015 SAML-IN / SAML-OUT - Scott Tomilson & John Dasilva

CIS 2015- Beyond Federation Protocols- Praerit Garg

CloudIDSummit

KMWorld Roundtable - Social Networks for Business Success, An Open Source Per...

rivetlogic

Orlando SFDC User Group 10/2011Joshua Hoskins

Secure Communication and Collaboration Software Comparison for Working From Home

The Talent Mill | Help Write Résumé | Job Search Superhero

April 2020 Office 365 Adoption Users Group meeting agenda

Michael Blumenthal (Microsoft MVP)

Connecting the New Enterprise | MuleSoft

MuleSoft

Watch an on-demand recording of this presentation: http://www.mulesoft.com/webinars/esb/connecting-the-new-enterprise The mega-trends of SaaS, mobile and Big Data are converging, generating a new wave of business opportunity for enterprises. The convergence demands a new kind of platform – one that connects and takes advantage of the explosion of endpoints and data caused by organizations each choosing a uniquely diverse set of best-of-breed applications to power their business. Ross Mason discusses his vision for this new platform and demonstrate how MuleSoft’s solutions are making it a reality. Discussions include: How will SaaS and mobility impact my business? Is SOA really dead? Does my business need an API strategy? Where should we start? Can the Anypoint platform help me secure a competitive advantage?

Patterns to Bring Enterprise and Social Identity to the Cloud

CA API Management

Ibm sametime 9 complete basic features installation from zero to hero

a8us

IBM Sametime 9 Complete - Basic Features Installation

Francisco González Jiménez

IBM Sametime 9 setup can be fast, smooth and easy when you know what you are doing. With this presentation we will show you how. The new server architecture of IBM Sametime 9 offers so many more options to deploy, that it is not easy to know where to start. In this document we want to prove that it is possible to create a "Proof-Of-Concept" setup very quickly. We show how to install all the new IBM Sametime 9 components: DB2 Server, System Console, Community Server, Proxy Server, Meeting Server, Media Server, Video Manager, Video MCU, Advanced Server and the Connect Client. At the end you can experience how to maintain and administer the whole environment just out of the IBM Sametime System Console.

SAML Smackdown

Pat Patterson

Performance Testing Web 2.0 Applications—in an Agile World

TechWell

Agile methodologies bring new complexities and challenges to traditional performance engineering practices, especially with Web 2.0 technologies that implement more and more functionality on the client side. Mohit Verma presents a Scrum-based performance testing lifecycle for Web 2.0 applications. Mohit explains when performance engineers need to participate in the project, discusses how important it is for the performance engineer to understand the technical architecture, and explores the importance of testing early to identify design issues. Find out how to create the non-functional requirements that are critical for building accurate and robust performance test scenarios. Learn how to implement practices for continuous collaboration between test engineers and developers to help identify performance bottlenecks early. Learn about the tools available today to help you address the testing and tuning of your Web 2.0 applications. Leave with a new appreciation and new approaches to ensure that your Web 2.0-based applications are ready for prime time from day one.

Linked In Features Technical

chomas kandar

Super feats of integration x pages with symphony sharepoint and office

John Head

MuleSoft_NZ_Meetup_8

MizuhoHoshino

Mule soft meetup_virtual_ 3_charlotte_07july_2021__final

Subhash Patel

Ibm software network2012 claudio cinquepalmi #ibmsocialbiz

Claudio Cinquepalmi

Saa s webinar slides final rlh - 3-31

neerajarasmussen

Salesforce Community is EasyGrazitti Interactive

Kochi Mulesoft Meetup #10 - MuleSoft Composer: Connect apps and data easily w...

sumitahuja94

mulecomposer.pdf

Srinivasa771031

Similar to CIS 2015 SAML-IN / SAML-OUT - Scott Tomilson & John Dasilva (20)

CIS 2015- Beyond Federation Protocols- Praerit Garg

KMWorld Roundtable - Social Networks for Business Success, An Open Source Per...

Orlando SFDC User Group 10/2011

Secure Communication and Collaboration Software Comparison for Working From Home

April 2020 Office 365 Adoption Users Group meeting agenda

Connecting the New Enterprise | MuleSoft

Patterns to Bring Enterprise and Social Identity to the Cloud

Ibm sametime 9 complete basic features installation from zero to hero

IBM Sametime 9 Complete - Basic Features Installation

SAML Smackdown

Performance Testing Web 2.0 Applications—in an Agile World

Linked In Features Technical

Super feats of integration x pages with symphony sharepoint and office

MuleSoft_NZ_Meetup_8

Mule soft meetup_virtual_ 3_charlotte_07july_2021__final

Ibm software network2012 claudio cinquepalmi #ibmsocialbiz

Saa s webinar slides final rlh - 3-31

Salesforce Community is Easy

Kochi Mulesoft Meetup #10 - MuleSoft Composer: Connect apps and data easily w...

mulecomposer.pdf

More from CloudIDSummit

CIS 2016 Content Highlights

CloudIDSummit

Top 6 Reasons You Should Attend Cloud Identity Summit 2016

CloudIDSummit

The Cloud Identity Summit was founded by Ping Identity with support from industry leaders in 2010 to bring together the brightest minds across the identity and security industry. Today the event is recognized as the world’s premier identity industry conference and includes tracks from industry thought leaders, CIOs and practitioners. Cloud Identity Summit serves as a multi-year roadmap to deploy solutions that are here today but built for the future. For more info, go to www.cloudidentitysummit.com. Be apart of the convo on Twitter: @CloudIDSummit + #CISNOLA

CIS 2015 Security Without Borders: Taming the Cloud and Mobile Frontier - And...CloudIDSummit

Mobile security, identity & authentication reasons for optimism 20150607 v2CloudIDSummit

CIS 2015 Mobile Security, Identity & Authentication: Reasons for Optimism - R...

CloudIDSummit

In an ever interconnected and inter-reliant world, the state of security has been a cause for deep pessimism. In the midst of all the gloom, there is good cause for optimism. With some fits and starts, the building blocks for transforming mobile security are taking shape at every level from the processor, to the chipset to special purpose hardware to operating systems and protocols that address use cases from device integrity to user authentication to payments. How do we think about security, privacy, identity and authentication in this world? This talk will provide a rapid overview of some selected building blocks and some practical examples that are now deployed at scale to illustrate the coming wave and how you as a practitioner or customer can participate and position yourself for maximum benefit.

CIS 2015 Virtual Identity: The Vision, Challenges and Experiences in Driving ...

CloudIDSummit

CIS 2015 Deploying Strong Authentication to a Global Enterprise: A Comedy in ...

CloudIDSummit

Does anybody remember seeing a big red button with the word “PANICK!” written on it? I know it was around here somewhere. Also, there’s all these cats running pell-mell around the place, can someone give me a hand in herding them? In this real-world case study, come and learn how a Fortune 100 with a diverse and extremely mobile work-force was able to turn up strong authentication protections for our critical cloud resources, and how the IT department lived to tell the tale. You’ll hear about the technical implementation of strong authentication enforcement, and how we made key design decisions in the ongoing balancing act between security and user experience, and how we managed up-and-down the chain from executive stakeholders to the boots-on-the-ground who were being asked to join us on this new security adventure.

CIS 2015 Without Great Security, Digital Identity is Not Worth the Electrons ...

CloudIDSummit

CIS 2015 Mergers & Acquisitions in a Cloud Enabled World - Brian Puhl

CloudIDSummit

You'll laugh, you'll cry, and you might even pick up a useful nugget or two listening to a real-world enterprise IT architect share the experiences of the past year trying to support his business migrating to cloud services, and sharing the lessons learned from trying to integrate 2 hybrid enterprises into a single, streamlined company. You'll hear where the cloud came through for us, and how we often had to fall back to on-prem services such as FIM, Ping Federate, and ADFS to make the glue which binds it all together.

CIS 2015 IoT and IDM in your Mobile Enterprise - Brian Katz

CloudIDSummit

CIS 2015 Practical Deployments Enterprise Cloud Access Management Platform - ...

CloudIDSummit

CIS 2015 What I Learned From Pitching IAM To My CIO - Steve Tout

CloudIDSummit

The IAM program needs to align behind the shift towards ITaaS, building the platform for execution and supporting transformation and migration activities. CIOs should keep informed through a relevant IAM capability roadmap in order to make calculated decisions on where investments should be made. Ongoing investments in the IAM program are crucial in order to fill capability gaps, keep up-to-date with support and license agreements and make opportunistic progress on the strategic roadmap. In this talk, Steve discusses recent experiences and lessons learned in preparing for and pitching VMware’s CIO on enterprise IAM program initiatives.

CIS 2015 How to secure the Internet of Things? Hannes Tschofenig

CloudIDSummit

Companies and researchers are exploring ways to make software and hardware development easier for the masses. Soon you will be able to build your own autonomous drone, create a sensor that assess the watering needs of your plants, and develop a cat tracking device with minimal coding and hardware skills. What is the place of security and privacy in this exciting development? Are we building the next generation of Internet security vulnerabilities right now? In his talk Hannes Tschofenig will highlight challenges with Internet of Things, what role standardization plays, and what contributions ARM, a provider of microprocessor IP, is making to improve IoT security.

CIS 2015 The IDaaS Dating Game - Sean Deuby

CloudIDSummit

The IDaaS (identity as a service) market segment continues to grow in popularity, and the scope of its vendor's capabilities continue to grow as well. It's still not a match for everyone, however. Join identity architect Sean Deuby for an overview of the most popular IDaaS deployment scenarios, scenarios where IDaaS has a tougher time meeting customer requirements, and whether your company is likely to find its perfect IDaaS mate.

The Industrial Internet, the Identity of Everything and the Industrial Enterp...

CloudIDSummit

CIS 2015 Identity Relationship Management in the Internet of Things

CloudIDSummit

Devices need owners, people need confidence in device authenticity, data needs to persist in systems long after devices change hands, and access needs to be authorized selectively. That's a lot to ask; even if emerging web identity and security technologies are simpler than the models of yesteryear, IoT devices have complicating limitations when it comes to processing power, memory, user interface, and connectivity. But many use cases span web and IoT environments, so we must try! What are the specific requirements? What elements of web technologies can we borrow outright? What elements may need tweaking?

CIS 2015 The Ethics of Personal Data - Robin Wilton

CloudIDSummit

We're all more conscious than we were 2 years ago, about how much data is collected about us, and how revealing it can be. The commercial and government direction of travel is clear: more data, more mining, more monetization. And if personal data fuels the information economy, who'd want to stop that? But can we get the economic benefits, without selling our digital souls in the process? - Is there a data equivalent to the ""polluter pays"" principle? And if not, is there an alternative? - Ethical data handling sounds great in principle, but can it be practical? - How can organizations put ethical data handling into practice?

CIS 2015 What’s next? Discovery, Dynamic Registration, Mobile Connect and mor...

CloudIDSummit

CIS 2015 OpenID Connect and Mobile Applications - David Chase

CloudIDSummit

CIS 2015 OpenID Connect Workshop Part 1: Challenges for mobile - B. Allyn Fay

CloudIDSummit

More from CloudIDSummit (20)

CIS 2016 Content Highlights

Top 6 Reasons You Should Attend Cloud Identity Summit 2016

CIS 2015 Security Without Borders: Taming the Cloud and Mobile Frontier - And...

Mobile security, identity & authentication reasons for optimism 20150607 v2

CIS 2015 Mobile Security, Identity & Authentication: Reasons for Optimism - R...

CIS 2015 Virtual Identity: The Vision, Challenges and Experiences in Driving ...

CIS 2015 Deploying Strong Authentication to a Global Enterprise: A Comedy in ...

CIS 2015 Without Great Security, Digital Identity is Not Worth the Electrons ...

CIS 2015 Mergers & Acquisitions in a Cloud Enabled World - Brian Puhl

CIS 2015 IoT and IDM in your Mobile Enterprise - Brian Katz

CIS 2015 Practical Deployments Enterprise Cloud Access Management Platform - ...

CIS 2015 What I Learned From Pitching IAM To My CIO - Steve Tout

CIS 2015 How to secure the Internet of Things? Hannes Tschofenig

CIS 2015 The IDaaS Dating Game - Sean Deuby

The Industrial Internet, the Identity of Everything and the Industrial Enterp...

CIS 2015 Identity Relationship Management in the Internet of Things

CIS 2015 The Ethics of Personal Data - Robin Wilton

CIS 2015 What’s next? Discovery, Dynamic Registration, Mobile Connect and mor...

CIS 2015 OpenID Connect and Mobile Applications - David Chase

CIS 2015 OpenID Connect Workshop Part 1: Challenges for mobile - B. Allyn Fay

Recently uploaded

A tale of scale & speed: How the US Navy is enabling software delivery from l...

sonjaschweigert1

Rapid and secure feature delivery is a goal across every application team and every branch of the DoD. The Navy’s DevSecOps platform, Party Barge, has achieved: - Reduction in onboarding time from 5 weeks to 1 day - Improved developer experience and productivity through actionable findings and reduction of false positives - Maintenance of superior security standards and inherent policy enforcement with Authorization to Operate (ATO) Development teams can ship efficiently and ensure applications are cyber ready for Navy Authorizing Officials (AOs). In this webinar, Sigma Defense and Anchore will give attendees a look behind the scenes and demo secure pipeline automation and security artifacts that speed up application ATO and time to production. We will cover: - How to remove silos in DevSecOps - How to build efficient development pipeline roles and component templates - How to deliver security artifacts that matter for ATO’s (SBOMs, vulnerability reports, and policy evidence) - How to streamline operations with automated policy checks on container images

Secstrike : Reverse Engineering & Pwnable tools for CTF.pptx

nkrafacyberclub

Encryption in Microsoft 365 - ExpertsLive Netherlands 2024

Albert Hoitingh

Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...

UiPathCommunity

💥 Speed, accuracy, and scaling – discover the superpowers of GenAI in action with UiPath Document Understanding and Communications Mining™: See how to accelerate model training and optimize model performance with active learning Learn about the latest enhancements to out-of-the-box document processing – with little to no training required Get an exclusive demo of the new family of UiPath LLMs – GenAI models specialized for processing different types of documents and messages This is a hands-on session specifically designed for automation developers and AI enthusiasts seeking to enhance their knowledge in leveraging the latest intelligent document processing capabilities offered by UiPath. Speakers: 👨‍🏫 Andras Palfi, Senior Product Manager, UiPath 👩‍🏫 Lenka Dulovicova, Product Program Manager, UiPath

GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...

James Anderson

Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management. The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM). Speakers: Bob Boule Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle. Gopinath Rebala Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.

Essentials of Automations: The Art of Triggers and Actions in FME

Safe Software

In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation. We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios. Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!

Quantum Computing: Current Landscape and the Future Role of APIs

Vlad Stirbu

DevOps and Testing slides at DASA Connect

Kari Kakkonen

FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf

FIDO Alliance

Assure Contact Center Experiences for Your Customers With ThousandEyes

ThousandEyes

GraphRAG is All You need? LLM & Knowledge Graph

Guy Korland

Guy Korland, CEO and Co-founder of FalkorDB, will review two articles on the integration of language models with knowledge graphs. 1. Unifying Large Language Models and Knowledge Graphs: A Roadmap. https://arxiv.org/abs/2306.08302 2. Microsoft Research's GraphRAG paper and a review paper on various uses of knowledge graphs: https://www.microsoft.com/en-us/research/blog/graphrag-unlocking-llm-discovery-on-narrative-private-data/

Elevating Tactical DDD Patterns Through Object Calisthenics

Dorra BARTAGUIZ

After immersing yourself in the blue book and its red counterpart, attending DDD-focused conferences, and applying tactical patterns, you're left with a crucial question: How do I ensure my design is effective? Tactical patterns within Domain-Driven Design (DDD) serve as guiding principles for creating clear and manageable domain models. However, achieving success with these patterns requires additional guidance. Interestingly, we've observed that a set of constraints initially designed for training purposes remarkably aligns with effective pattern implementation, offering a more ‘mechanical’ approach. Let's explore together how Object Calisthenics can elevate the design of your tactical DDD patterns, offering concrete help for those venturing into DDD for the first time!

GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...

Sri Ambati

Climate Impact of Software Testing at Nordic Testing Days

Kari Kakkonen

My slides at Nordic Testing Days 6.6.2024 Climate impact / sustainability of software testing discussed on the talk. ICT and testing must carry their part of global responsibility to help with the climat warming. We can minimize the carbon footprint but we can also have a carbon handprint, a positive impact on the climate. Quality characteristics can be added with sustainability, and then measured continuously. Test environments can be used less, and in smaller scale and on demand. Test techniques can be used in optimizing or minimizing number of tests. Test automation can be used to speed up testing.

Enhancing Performance with Globus and the Science DMZ

Globus

Accelerate your Kubernetes clusters with Varnish Caching

Thijs Feryn

Generative AI Deep Dive: Advancing from Proof of Concept to Production

Aggregage

The Metaverse and AI: how can decision-makers harness the Metaverse for their...

Jen Stirrup

The Metaverse is popularized in science fiction, and now it is becoming closer to being a part of our daily lives through the use of social media and shopping companies. How can businesses survive in a world where Artificial Intelligence is becoming the present as well as the future of technology, and how does the Metaverse fit into business strategy when futurist ideas are developing into reality at accelerated rates? How do we do this when our data isn't up to scratch? How can we move towards success with our data so we are set up for the Metaverse when it arrives? How can you help your company evolve, adapt, and succeed using Artificial Intelligence and the Metaverse to stay ahead of the competition? What are the potential issues, complications, and benefits that these technologies could bring to us and our organizations? In this session, Jen Stirrup will explain how to start thinking about these technologies as an organisation.

Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...

James Anderson

FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf

FIDO Alliance

Recently uploaded (20)

A tale of scale & speed: How the US Navy is enabling software delivery from l...

Secstrike : Reverse Engineering & Pwnable tools for CTF.pptx

Encryption in Microsoft 365 - ExpertsLive Netherlands 2024

Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...

GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...

Essentials of Automations: The Art of Triggers and Actions in FME

Quantum Computing: Current Landscape and the Future Role of APIs

DevOps and Testing slides at DASA Connect

FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf

Assure Contact Center Experiences for Your Customers With ThousandEyes

GraphRAG is All You need? LLM & Knowledge Graph

Elevating Tactical DDD Patterns Through Object Calisthenics

GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...

Climate Impact of Software Testing at Nordic Testing Days

Enhancing Performance with Globus and the Science DMZ

Accelerate your Kubernetes clusters with Varnish Caching

Generative AI Deep Dive: Advancing from Proof of Concept to Production

The Metaverse and AI: how can decision-makers harness the Metaverse for their...

Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...

FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf