Federation in Practice

•

8 likes•6,230 views

A Development session led by Technical Enablement Lead Bert Van Beeck Learn more about ForgeRock Access Management: https://www.forgerock.com/platform/access-management/ Learn more about ForgeRock Identity Management: https://www.forgerock.com/platform/identity-management/

Technology Business

2013 Open Stack Identity Summit - France

Federation in practice

Applications and data within the firewall perimeter
Users within the enterprise
Difficult to roll out new services

OLD ACCESS CONTROL

Hanseatic League (Hansa)
Trade Confederation
Centuries 13th – 17th

Trading outside the walls
•  Secure
•  Membership agreement
•  Follow protocol

Customers
Outsourcing
Partners

Suppliers

Information, services and users
outside the fireWALL

The dictionary
Federalism is a political concept in which
a group of members are bound together
by covenant (Latin: foedus, covenant*)
with a governing representative head.
*Agreement

SChengen Area
It is a group of 26 European
countries that have abolished
passport and immigration
controls at their common
borders.

§  Present your security token at the entrance
§  Travel seamlessly within the area

Customers
Outsourcing
Databases

Directory

Active
Directory

Commercial
Applications
In-house dev
applications
Legacy
applications

FEDERATED
IDENTITY

Enterprise

Partners
Suppliers
Is the means of linking a person´s electronic identity and attributes,
stored across multiple distinct identity management systems

Benefits of Federated identity
•  Provides Single Sign On for an enhanced user
experience
•  Share information across partners securely and
privately
•  Promote adoption of new services
•  Reduces costs
•  Cloud friendly
•  Mobile friendly

Identity Federation Standards

ID-FF

Ws-federation

SAML 2.0

Federation support

OpenID 
Connect!

OAUTH 2.0!
REST/JSON

ID-FF"
Shibboleth
1.0/1.1"

SAML 1.0"

SAML 1.x"

Shibboleth 2 
(SAML2)"

OpenAM"

SAML 2.0!
ADFS2 
(SAML 2)"

WS-Federation
1.0"

WS-Federation
1.1"
ADFS"
SOAP/XML
10

Identity Federation Actors
Circle of Trust

Identity Provider,
Asserting PARTY, IdP

Authenticate
Obtain Token

Agreements

Service Provider,
Relaying party,
Consumer, SP

principal

Service Provider,
Relaying party,
Consumer, SP

Present token
Access resource

Use Cases
§  Enterprise connected to Cloud SaaS, partners, suppliers, etc

Social

§  Customers using social authentication

Databases

Directory

Active
Directory

Commercial
Applications

SaaS

In-house dev
applications
Legacy
applications

Private Cloud
Partners
Outsourcing
Suppliers

Use Cases
§  SaaS/IDaas Providing services to Enterprises
§  Social authentication to SaaS and IDaaS

Databases

Directory

Active
Directory

Commercial
Applications
In-house dev
applications
Legacy
applications

Social

SaaS

Multi-tenant
IdP

Private Cloud

Multi-tenant
SP

Mobile IAM for the Modern Web

Web
App

Web
App

Login
App

OAuth2

Native
App

REST

Native
App

OpenID Connect

OpenAM
Authentication
Authorization
Attribute Delivery

Cloud

Federation
SSO
Token Persistence
Session Mgmt
OAuth2 Provider

Enterprise
14

IdP Proxy
IdP
SP
IdP
SP
SP

IdP
Proxy

IdP
IdP

Federation is more than SSO
SAML 2.0
IdP, SP, IdP Proxy, Attribute Query Provider, Attribute
Authority, Authentication Authority, XACML PEP, XACML
PDP

WS-Federation
IdP, SP

ID-FF
IdP, SP

OAuth 2.0
RESTful Authorization protocol

OpenID Connect
Uses OAUTH2 tokens, adds services

OpenAM + family
OpenAM
Full blown Federation

OpenAM Fedlet
Lightweight SAML 2.0 SP

OpenIG and Fedlet
Powerful combination of integration and SAML 2.0

Bridge SPE/SalesForce Bridge
SAAS oriented federation/sync bridge, includes SAML 2.0
and OAUTH2.

Custom federation
Reverse
Proxy

1

3

Custom
AuthN Module
State 1

Policy
Agent

“Custom IDP”

OpenAM

Application

6

Policy
Agent

Application

Application

Application

2

SP

IDP

Fedlet

Custom
AuthN Module
State 2

Custom
Post
Authentication
Module

4

5

19

Walkthrough configure OpenAM
to achieve SSO to
Google Apps
WordPress
Office365
using SAML2

Federated Single Sign-On
demo.openam.org

IDP
Circle of Trust

SP

SP

SP

Presented by Ludovic Poitou, OpenDJ Product Manager, ForgeRock, Anders Askasen OpenIDM Product Manager, ForgeRock, and Victor Ake, OpenAM Product Manager and ForgeRock CoFounder, on June 13, 2013 at ForgeRock Open Identity Stack Summit Learn more about ForgeRock Access Management: https://www.forgerock.com/platform/access-management/ Learn more about ForgeRock Identity Management: https://www.forgerock.com/platform/identity-management/

OpenAM - An Introduction

ForgeRock

OpenAM Best Practices - Corelio Media Case Study

ForgeRock

Shoot Me a Token: OpenAM as an OAuth2 Provider

ForgeRock

Incredible Edible Identity

ForgeRock

OIS Architecture Review

ForgeRock

Identity Management with the ForgeRock Identity Platform - So What’s New?

ForgeRock

It’s no secret that Identity Management is a key component to any modern identity solution. Organizations need to easily provision, de-provision and perform synchronization & reconciliation tasks across not just users, but devices and things as well. The future of Identity Management will require the unique flexibility of a service based approach with custom configurable administrative and self-service capabilities that can handle any kind of Identity. Find out more about how all forms of identity (business, consumer and device) can by centralized, normalized, coordinated and managed by policy - and automated to ensure a consistent experience that complies with regulations and policies. Discover how ForgeRock can help you deliver Identity Management the right way to your customers, partners and employees. Learn more about ForgeRock Access Management: https://www.forgerock.com/platform/access-management/ Learn more about ForgeRock Identity Management: https://www.forgerock.com/platform/identity-management/

Webinar: Extend The Power of The ForgeRock Identity Platform Through Scripting

ForgeRock

Scripting extends ForgeRock products in a powerful way, both for deployers as well as developers. For OpenAM, deployers can embed the ssoadm command line utility in comprehensive shells scripts for ultra fast deployments and configurations. Developers can use scripts for client-side and server-side authentication, policy conditions, and handling OpenID Connect claims. In OpenIDM, scripting allows you to customize various aspects of OpenIDM functionality, by providing custom logic between source and target mappings, defining correlation rules, filters, triggers, and more. Webinar Highlights: Scripting The ForgeRock Platform Q&A Join Anders Askåsen, Senior Technical Product Manager, and Javed Shah, Senior Sales Engineer, as they highlight the concepts and show examples and best practices for scripting with the ForgeRock Identity Platform.

Let’s be frank. Your identity platform is only as good as its foundation. “Identity done right” gets done wrong without a rock-solid directory to store and access all that identity data. While certainly not a sexy topic… directory is your plumbing making it a critical aspect regardless of its appeal. Good news for you however, either way you look at it our Directory Services, built from the OpenDJ project, is the gold standard: decades of telco experience led us to develop a high-performance, web-scale directory, delivering throughput in the tens-of-thousands of logins per second. We’re not s*itting you when we say we’ve got a lot of experience where the Sun don’t shine! Webinar Highlights: - Intro to the ForgeRock Identity Platform - New features available in the release - What does performance, scalability, and high availability to manage data for hundreds of millions of users, devices, and things look like? Learn more about ForgeRock Access Management: https://www.forgerock.com/platform/access-management/ Learn more about ForgeRock Identity Management: https://www.forgerock.com/platform/identity-management/

Webinar: ForgeRock Identity Platform Preview (Dec 2015)

ForgeRock

The wait is over! ForgeRock is releasing shiny new versions of all solution areas of the ForgeRock Identity Platform. To give you a preview on what’s coming, join this webinar to hear directly from the Product Managers what’s new in: Access Management Identity Management Directory Services Identity Gateway Shared Services Learn more about ForgeRock Access Management: https://www.forgerock.com/platform/access-management/ Learn more about ForgeRock Identity Management: https://www.forgerock.com/platform/identity-management/

IDP Proxy Concept: Accessing Identity Data Sources Everywhere!

ForgeRock

Webinar: Access Management with the ForgeRock Identity Platform - So What’s N...

ForgeRock

Webinar: OpenIDM 3.1

ForgeRock

OpenAM as Flexible Integration Component

ForgeRock

Webinar: OpenAM 12.0 - New Featurs

ForgeRock

OpenIDM: An IntroductionForgeRock

OpenAM Survival Tips

ForgeRock

Identity as a Managed Cloud Service

ForgeRock

Single sign on using WSO2 identity serverWSO2

Customer Scale: Stateless Sessions and Managing High-Volume Digital Services

ForgeRock

WSO2 Identity Server WSO2

OpenID Connect and Single Sign-On for Beginners

Salesforce Developers

Websites and applications are implementing social single sign-on to allow users to login using trusted authentication providers such as Google, Facebook, and even Salesforce. Join us to learn how to configure the OpenID Connect authentication provider to allow users to authenticate at Google to access a Salesforce environment. We'll also look at how you can relieve yourself of the burden of password management by having your web app login users via Salesforce.

Digital Trust: How Identity Tackles the Privacy, Security and IoT Challenge

ForgeRock

In this webinar, learn how the ForgeRock Identity Platform and its new User-Managed Access capabilities make it easier for organizations to establish trusted digital relationships with customers, embrace IoT initiatives, and address rapidly changing data privacy regulations. Learn more about ForgeRock Access Management: https://www.forgerock.com/platform/access-management/ Learn more about ForgeRock Identity Management: https://www.forgerock.com/platform/identity-management/

Bring your own Identity (BYOID) with WSO2 Identity ServerWSO2

Enterprise Security Requirements

WSO2

To view recording of this webinar please use the below URL: http://wso2.com/library/webinars/2016/06/enterprise-security-requirements/ Meeting enterprise security requirements has now become challenging due to development of orthogonal aspects. Systems are diverse because a single vendor can’t cater to all these needs. Some enterprise also introduce public SaaS in addition to their internal on-premise system. APIs are used to make data in these systems readily available in order to integrate with other systems and automate processes. Identity and access management (IAM) systems are expected to provide centralized authentication and authorization despite the increase in complexity of data, systems and identities. This webinar will discuss how to Enable SSO for heterogeneous systems Handle different types of enterprise identities Protect your data and APIs Implement centralized authorization and authentication management

Federation in Practice

ForgeRock

DEVNET-1132 Create B2B Exchanges with Cisco Connected Processes

Cisco DevNet

The opportunity cost of business disruptions in the hyper-connected world can be very high. To ensure business continuity and optimization, organizations are automating many critical workflows and infrastructure operations throughout their enterprise and extended ecosystems. Cisco Connected Processes software enable architects, application developers and integration professionals to deliver business processes and automation as a service, while managing workflows and data more efficiently and effectively. Join this session to learn how scalable operational efficiencies can save you time and money while simplifying collaboration between all the members of your technical community.

What's hot

THE FORGEROCK PLATFORM BIG PICTURE

ForgeRock

OpenAM: An Introduction

ForgeRock

Implementing eGov

ForgeRock

Directory Services with the ForgeRock Identity Platform - So What’s New?

ForgeRock

Webinar: ForgeRock Identity Platform Preview (Dec 2015)

ForgeRock

IDP Proxy Concept: Accessing Identity Data Sources Everywhere!

ForgeRock

Webinar: Access Management with the ForgeRock Identity Platform - So What’s N...

ForgeRock

Webinar: OpenIDM 3.1

ForgeRock

OpenAM as Flexible Integration Component

ForgeRock

Webinar: OpenAM 12.0 - New Featurs

ForgeRock

OpenIDM: An IntroductionForgeRock

OpenAM Survival Tips

ForgeRock

Identity as a Managed Cloud Service

ForgeRock

Single sign on using WSO2 identity serverWSO2

Customer Scale: Stateless Sessions and Managing High-Volume Digital Services

ForgeRock

WSO2 Identity Server WSO2

OpenID Connect and Single Sign-On for Beginners

Salesforce Developers

Digital Trust: How Identity Tackles the Privacy, Security and IoT Challenge

ForgeRock

Bring your own Identity (BYOID) with WSO2 Identity ServerWSO2

Enterprise Security Requirements

WSO2

What's hot (20)

THE FORGEROCK PLATFORM BIG PICTURE

OpenAM: An Introduction

Implementing eGov

Directory Services with the ForgeRock Identity Platform - So What’s New?

Webinar: ForgeRock Identity Platform Preview (Dec 2015)

IDP Proxy Concept: Accessing Identity Data Sources Everywhere!

Webinar: Access Management with the ForgeRock Identity Platform - So What’s N...

Webinar: OpenIDM 3.1

OpenAM as Flexible Integration Component

Webinar: OpenAM 12.0 - New Featurs

OpenIDM: An Introduction

OpenAM Survival Tips

Identity as a Managed Cloud Service

Single sign on using WSO2 identity server

Customer Scale: Stateless Sessions and Managing High-Volume Digital Services

WSO2 Identity Server

OpenID Connect and Single Sign-On for Beginners

Digital Trust: How Identity Tackles the Privacy, Security and IoT Challenge

Bring your own Identity (BYOID) with WSO2 Identity Server

Enterprise Security Requirements

Similar to Federation in Practice

Federation in Practice

ForgeRock

DEVNET-1132 Create B2B Exchanges with Cisco Connected Processes

Cisco DevNet

Open am and_radiantoneJose R

Identity as a ServicePrabath Siriwardena

Zarafa SummerCamp 2012 - Keynote Peter GantenZarafa

Hybrid IAM: Fuelling Agility in the Cloud Transformation Journey | Gartner IA...

Ping Identity

Presenter: Loren Russon, VP Product Management at Ping Identity. As your organisation evolves on its cloud transformation journey, your identity and access management (IAM) system must allow you to navigate multiple cloud environments, managing access to mobile, API and traditional applications. Modern identity services like multi-factor authentication (MFA) and identity intelligence help deliver secure and seamless access for any user, environment and use case. Learn how to transform your IAM system to a modern, API and cloud-first hybrid solution, enabling developers, administrators and users with the self-service applications and tools they need to keep pace with the accelerating demand for mobile and cloud-based applications.

Synergies across APIs and IAM

Sagara Gunathunga

FIWARE Global Summit - International Data Spaces - A New Idea for Sharing Data

FIWARE

WSO2Con 2011: Introduction to Stratos

Afkham Azeez

More enterprises are recognizing the opportunity to extend the reach and cost-efficiency of their applications by delivering them as software-as-a-service (SaaS). However, the approach to deploying in the cloud and the choice of either cloud middleware software or a platform-as-a-service (PaaS) can significantly affect the success of a SaaS implementation. WSO2 Stratos is a complete enterprise-ready cloud middleware platform designed to extend SOAs to the cloud, and it is the software that powers the WSO2 StratosLive PaaS. By providing WSO2 Carbon products as services over public, private, and hybrid cloud infrastructure, WSO2 Stratos offers an ideal platform for SaaS developers to create, manage and run enterprise-class applications and services with all the inherent benefits of a true cloud-native environment.In this session, we will be looking at the WSO2 Stratos cloud middleware platform and the benefits it offers in developing, testing, deploying and managing cloud-native applications.

WSO2con 2011: Introduction to Stratos

Afkham Azeez

Wsdl BahankuliahEri Alam

Radisys Keynote, Gamifying the User’s Journey, Adnan Saleem

Alan Quayle

Gamifying the User’s Journey and the CSPs Service Offering Adnan Saleem, CTO Software and Cloud Solutions Telecom operators and numerous industry verticals lack creative engagement with their digital-savvy customer base. The next-generation AI-based applications can enable operators to offer personalized experiences while driving new monetization opportunities. Gamification of user interactions in various applications can be done by ‘rewarding’ users for taking desired actions and active participation, and delivering relevant content and offers within immersive experiences are some of the unique ways to engage the users and monetize the contextual interactions. However, balancing the cost of delivering dynamically personalized services, enhancing customer experience through immersive digital engagements, and optimizing business productivity remains a crucial challenge for businesses, application developers, service providers, and system integrators. The business growth will come by integrating the right mix of technologies such as 5G, IoT, cloud edge computing, speech analytics, augmented reality, computer vision, conversational artificial intelligence, and machine learning; and an integrated ecosystem that includes partner on-boarding, logistics, promotional inventory management and behavioral analytics. Radisys has recently collaborated with the TM Forum to deliver a project, called ‘Ready Telco One’ (led by Orange Group, Orange Poland, KDDI, and solution vendors) that demonstrates how telecom operators can gamify user journeys in various applications in health and fitness, live events, education and learning, entertainment and marketing campaigns to name a few. . This presentation will focus on how Radisys was able to streamline live AR/VR multimedia interactions with a robust media server platform (User Interaction Delivery Engine) for hyper-personalized, real-time customer engagement.

Cloud MashupVasco Elvas

Enterprise API deployment best practice

Sanjay Roy

Feide Connect

Andreas Åkre Solberg

Safenet Authentication Service, SAS

robbuddingh

Web Services

chidi

Premier Webcast - Identity Management with Windows Azure ADuberbaum

Single Sign On 101

Mike Schwartz

Application platform and integration platform strategy and roadmap

BizTalk360

Similar to Federation in Practice (20)

Federation in Practice

DEVNET-1132 Create B2B Exchanges with Cisco Connected Processes

Open am and_radiantone

Identity as a Service

Zarafa SummerCamp 2012 - Keynote Peter Ganten

Hybrid IAM: Fuelling Agility in the Cloud Transformation Journey | Gartner IA...

Synergies across APIs and IAM

FIWARE Global Summit - International Data Spaces - A New Idea for Sharing Data

WSO2Con 2011: Introduction to Stratos

WSO2con 2011: Introduction to Stratos

Wsdl Bahankuliah

Radisys Keynote, Gamifying the User’s Journey, Adnan Saleem

Cloud Mashup

Enterprise API deployment best practice

Feide Connect

Safenet Authentication Service, SAS

Web Services

Premier Webcast - Identity Management with Windows Azure AD

Single Sign On 101

Application platform and integration platform strategy and roadmap

More from ForgeRock

Digital Identities in the Internet of Things - Securely Manage Devices at Scale

ForgeRock

In this webcast, KuppingerCole´s Principal Analyst Martin Kuppinger will introduce the concept of Identity Management for the Internet of Things. Following Martin's opening talk, ForgeRock´s Gerhard Zehethofer will discuss how ForgeRock is now extending these capabilities into the areas of managed and unmanaged devices, enhancing the customer experience as well as security and privacy at scale for people, services, and things.

Get the Exact Identity Solution You Need - In the Cloud - AWS and Beyond

ForgeRock

Identity Live Sydney: Identity Management - A Strategic Opportunity

ForgeRock

Identity Live Singapore: Transform Your Cybersecurity Capability

ForgeRock

Identity Live Singapore 2018 Keynote Presentation

ForgeRock

Identity Live Sydney 2018 Keynote Presentation

ForgeRock

Identity Live Singapore: Just Ask 'Em

ForgeRock

Identity Live Singapore: Building Trust & Privacy in a Connected Society

ForgeRock

Identity Live Sydney: Intelligent Authentication

ForgeRock

Identity Live Sydney: Building Trust and Privacy in a Connected Society

ForgeRock

Get the Exact Identity Solution you Need in the Cloud - Deep Dive

ForgeRock

Containerized IAM on Amazon Web Services - Deep Dive A deep technical look at the architecture behind running containerized IAM on AWS and what your team needs for a successful deployment You’ll experience an in depth review of: Assets and processes needed to containerize ForgeRock Architecture and processes guiding containerized IAM on AWS How containers are deployed into Kubernetes Monitoring and management strategies Continuous integration configuration

Get the Exact Identity Solution You Need - In the Cloud - Overview

ForgeRock

ForgeRock and Trusona - Simplifying the Multi-factor User Experience

ForgeRock

Authentication and MFA is no longer a one-mode-fits-all experience. Customer-centric companies need flexible intelligence models and simple, consistent login journeys across channels—web, call center, mobile—without being forced to bolt MFA on top of usernames and passwords. ForgeRock’s VP, Global Strategy and Innovation, Ben Goodman, and Trusona’s Chief Design Officer, Kevin Goldman, explain how ForgeRock combined with Trusona creates a broad range of multi-factor authentication modalities all with a consistent user experience, including primary MFA without usernames, passwords or typing whatsoever. Bonus: Trusona will reveal findings from the first-ever passwordless MFA behavioral research.

Opening Keynote (Identity Live Berlin 2018)

ForgeRock

Steinberg - Customer identity as the cornerstone of our approach to digitaliz...

ForgeRock

BMW Group - Identity Enables the Next 100 Years.. (Identity Live Berlin 2018)

ForgeRock

Trust is Everything - The Future of Identity and the ForgeRock Platform (Iden...

ForgeRock

Silo Busters- The Value of User and Data Centricity beyond IoT Devices (Ident...

ForgeRock

Shift from GDPR readiness to sustained compliance to improve your business an...

ForgeRock

Intelligent Authentication (Identity Live Berlin 2018)

ForgeRock

More from ForgeRock (20)

Digital Identities in the Internet of Things - Securely Manage Devices at Scale

Get the Exact Identity Solution You Need - In the Cloud - AWS and Beyond

Identity Live Sydney: Identity Management - A Strategic Opportunity

Identity Live Singapore: Transform Your Cybersecurity Capability

Identity Live Singapore 2018 Keynote Presentation

Identity Live Sydney 2018 Keynote Presentation

Identity Live Singapore: Just Ask 'Em

Identity Live Singapore: Building Trust & Privacy in a Connected Society

Identity Live Sydney: Intelligent Authentication

Identity Live Sydney: Building Trust and Privacy in a Connected Society

Get the Exact Identity Solution you Need in the Cloud - Deep Dive

Get the Exact Identity Solution You Need - In the Cloud - Overview

ForgeRock and Trusona - Simplifying the Multi-factor User Experience

Opening Keynote (Identity Live Berlin 2018)

Steinberg - Customer identity as the cornerstone of our approach to digitaliz...

BMW Group - Identity Enables the Next 100 Years.. (Identity Live Berlin 2018)

Trust is Everything - The Future of Identity and the ForgeRock Platform (Iden...

Silo Busters- The Value of User and Data Centricity beyond IoT Devices (Ident...

Shift from GDPR readiness to sustained compliance to improve your business an...

Intelligent Authentication (Identity Live Berlin 2018)

Recently uploaded

SAP Sapphire 2024 - ASUG301 building better apps with SAP Fiori.pdf

Peter Spielvogel

Building better applications for business users with SAP Fiori. • What is SAP Fiori and why it matters to you • How a better user experience drives measurable business benefits • How to get started with SAP Fiori today • How SAP Fiori elements accelerates application development • How SAP Build Code includes SAP Fiori tools and other generative artificial intelligence capabilities • How SAP Fiori paves the way for using AI in SAP apps

Essentials of Automations: The Art of Triggers and Actions in FME

Safe Software

In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation. We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios. Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!

Encryption in Microsoft 365 - ExpertsLive Netherlands 2024

Albert Hoitingh

The Future of Platform Engineering

Jemma Hussein Allen

DevOps and Testing slides at DASA Connect

Kari Kakkonen

Introduction to CHERI technology - Cybersecurity

mikeeftimakis1

RESUME BUILDER APPLICATION Project for students

KAMESHS29

The Art of the Pitch: WordPress Relationships and Sales

Laura Byrne

Clients don’t know what they don’t know. What web solutions are right for them? How does WordPress come into the picture? How do you make sure you understand scope and timeline? What do you do if sometime changes? All these questions and more will be explored as we talk about matching clients’ needs with what your agency offers without pulling teeth or pulling your hair out. Practical tips, and strategies for successful relationship building that leads to closing the deal.

Climate Impact of Software Testing at Nordic Testing Days

Kari Kakkonen

My slides at Nordic Testing Days 6.6.2024 Climate impact / sustainability of software testing discussed on the talk. ICT and testing must carry their part of global responsibility to help with the climat warming. We can minimize the carbon footprint but we can also have a carbon handprint, a positive impact on the climate. Quality characteristics can be added with sustainability, and then measured continuously. Test environments can be used less, and in smaller scale and on demand. Test techniques can be used in optimizing or minimizing number of tests. Test automation can be used to speed up testing.

GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...

Sri Ambati

Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf

Paige Cruz

Monitoring and observability aren’t traditionally found in software curriculums and many of us cobble this knowledge together from whatever vendor or ecosystem we were first introduced to and whatever is a part of your current company’s observability stack. While the dev and ops silo continues to crumble….many organizations still relegate monitoring & observability as the purview of ops, infra and SRE teams. This is a mistake - achieving a highly observable system requires collaboration up and down the stack. I, a former op, would like to extend an invitation to all application developers to join the observability party will share these foundational concepts to build on:

LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...

DanBrown980551

Do you want to learn how to model and simulate an electrical network from scratch in under an hour? Then welcome to this PowSyBl workshop, hosted by Rte, the French Transmission System Operator (TSO)! During the webinar, you will discover the PowSyBl ecosystem as well as handle and study an electrical network through an interactive Python notebook. PowSyBl is an open source project hosted by LF Energy, which offers a comprehensive set of features for electrical grid modelling and simulation. Among other advanced features, PowSyBl provides: - A fully editable and extendable library for grid component modelling; - Visualization tools to display your network; - Grid simulation tools, such as power flows, security analyses (with or without remedial actions) and sensitivity analyses; The framework is mostly written in Java, with a Python binding so that Python developers can access PowSyBl functionalities as well. What you will learn during the webinar: - For beginners: discover PowSyBl's functionalities through a quick general presentation and the notebook, without needing any expert coding skills; - For advanced developers: master the skills to efficiently apply PowSyBl functionalities to your real-world scenarios.

State of ICS and IoT Cyber Threat Landscape Report 2024 preview

Prayukth K V

The IoT and OT threat landscape report has been prepared by the Threat Research Team at Sectrio using data from Sectrio, cyber threat intelligence farming facilities spread across over 85 cities around the world. In addition, Sectrio also runs AI-based advanced threat and payload engagement facilities that serve as sinks to attract and engage sophisticated threat actors, and newer malware including new variants and latent threats that are at an earlier stage of development. The latest edition of the OT/ICS and IoT security Threat Landscape Report 2024 also covers: State of global ICS asset and network exposure Sectoral targets and attacks as well as the cost of ransom Global APT activity, AI usage, actor and tactic profiles, and implications Rise in volumes of AI-powered cyberattacks Major cyber events in 2024 Malware and malicious payload trends Cyberattack types and targets Vulnerability exploit attempts on CVEs Attacks on counties – USA Expansion of bot farms – how, where, and why In-depth analysis of the cyber threat landscape across North America, South America, Europe, APAC, and the Middle East Why are attacks on smart factories rising? Cyber risk predictions Axis of attacks – Europe Systemic attacks in the Middle East Download the full report from here: https://sectrio.com/resources/ot-threat-landscape-reports/sectrio-releases-ot-ics-and-iot-security-threat-landscape-report-2024/

Securing your Kubernetes cluster_ a step-by-step guide to success !

KatiaHIMEUR1

Today, after several years of existence, an extremely active community and an ultra-dynamic ecosystem, Kubernetes has established itself as the de facto standard in container orchestration. Thanks to a wide range of managed services, it has never been so easy to set up a ready-to-use Kubernetes cluster. However, this ease of use means that the subject of security in Kubernetes is often left for later, or even neglected. This exposes companies to significant risks. In this talk, I'll show you step-by-step how to secure your Kubernetes cluster for greater peace of mind and reliability.

FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf

FIDO Alliance

Quantum Computing: Current Landscape and the Future Role of APIs

Vlad Stirbu

FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf

FIDO Alliance

Accelerate your Kubernetes clusters with Varnish Caching

Thijs Feryn

Removing Uninteresting Bytes in Software Fuzzing

Aftab Hussain

Imagine a world where software fuzzing, the process of mutating bytes in test seeds to uncover hidden and erroneous program behaviors, becomes faster and more effective. A lot depends on the initial seeds, which can significantly dictate the trajectory of a fuzzing campaign, particularly in terms of how long it takes to uncover interesting behaviour in your code. We introduce DIAR, a technique designed to speedup fuzzing campaigns by pinpointing and eliminating those uninteresting bytes in the seeds. Picture this: instead of wasting valuable resources on meaningless mutations in large, bloated seeds, DIAR removes the unnecessary bytes, streamlining the entire process. In this work, we equipped AFL, a popular fuzzer, with DIAR and examined two critical Linux libraries -- Libxml's xmllint, a tool for parsing xml documents, and Binutil's readelf, an essential debugging and security analysis command-line tool used to display detailed information about ELF (Executable and Linkable Format). Our preliminary results show that AFL+DIAR does not only discover new paths more quickly but also achieves higher coverage overall. This work thus showcases how starting with lean and optimized seeds can lead to faster, more comprehensive fuzzing campaigns -- and DIAR helps you find such seeds. - These are slides of the talk given at IEEE International Conference on Software Testing Verification and Validation Workshop, ICSTW 2022.

Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...

UiPathCommunity

💥 Speed, accuracy, and scaling – discover the superpowers of GenAI in action with UiPath Document Understanding and Communications Mining™: See how to accelerate model training and optimize model performance with active learning Learn about the latest enhancements to out-of-the-box document processing – with little to no training required Get an exclusive demo of the new family of UiPath LLMs – GenAI models specialized for processing different types of documents and messages This is a hands-on session specifically designed for automation developers and AI enthusiasts seeking to enhance their knowledge in leveraging the latest intelligent document processing capabilities offered by UiPath. Speakers: 👨‍🏫 Andras Palfi, Senior Product Manager, UiPath 👩‍🏫 Lenka Dulovicova, Product Program Manager, UiPath

Recently uploaded (20)

SAP Sapphire 2024 - ASUG301 building better apps with SAP Fiori.pdf

Essentials of Automations: The Art of Triggers and Actions in FME

Encryption in Microsoft 365 - ExpertsLive Netherlands 2024

The Future of Platform Engineering

DevOps and Testing slides at DASA Connect

Introduction to CHERI technology - Cybersecurity

RESUME BUILDER APPLICATION Project for students

The Art of the Pitch: WordPress Relationships and Sales

Climate Impact of Software Testing at Nordic Testing Days

GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...

Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf

LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...

State of ICS and IoT Cyber Threat Landscape Report 2024 preview

Securing your Kubernetes cluster_ a step-by-step guide to success !

FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf

Quantum Computing: Current Landscape and the Future Role of APIs

FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf

Accelerate your Kubernetes clusters with Varnish Caching

Removing Uninteresting Bytes in Software Fuzzing

Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...

Federation in Practice

1. 2013 Open Stack Identity Summit - France Federation in practice

2. Applications and data within the firewall perimeter Users within the enterprise Difficult to roll out new services OLD ACCESS CONTROL

3. Hanseatic League (Hansa) Trade Confederation Centuries 13th – 17th Trading outside the walls •  Secure •  Membership agreement •  Follow protocol

4. Customers Outsourcing Partners Suppliers Information, services and users outside the fireWALL

5. The dictionary Federalism is a political concept in which a group of members are bound together by covenant (Latin: foedus, covenant*) with a governing representative head. *Agreement

6. SChengen Area It is a group of 26 European countries that have abolished passport and immigration controls at their common borders. §  Present your security token at the entrance §  Travel seamlessly within the area

7. Customers Outsourcing Databases Directory Active Directory Commercial Applications In-house dev applications Legacy applications FEDERATED IDENTITY Enterprise Partners Suppliers Is the means of linking a person´s electronic identity and attributes, stored across multiple distinct identity management systems

8. Benefits of Federated identity •  Provides Single Sign On for an enhanced user experience •  Share information across partners securely and privately •  Promote adoption of new services •  Reduces costs •  Cloud friendly •  Mobile friendly

9. Identity Federation Standards ID-FF Ws-federation SAML 2.0

10. Federation support OpenID  Connect! OAUTH 2.0! REST/JSON ID-FF" Shibboleth 1.0/1.1" SAML 1.0" SAML 1.x" Shibboleth 2  (SAML2)" OpenAM" SAML 2.0! ADFS2  (SAML 2)" WS-Federation 1.0" WS-Federation 1.1" ADFS" SOAP/XML 10

11. Identity Federation Actors Circle of Trust Identity Provider, Asserting PARTY, IdP Authenticate Obtain Token Agreements Service Provider, Relaying party, Consumer, SP principal Service Provider, Relaying party, Consumer, SP Present token Access resource

12. Use Cases §  Enterprise connected to Cloud SaaS, partners, suppliers, etc Social §  Customers using social authentication Databases Directory Active Directory Commercial Applications SaaS In-house dev applications Legacy applications Private Cloud Partners Outsourcing Suppliers

13. Use Cases §  SaaS/IDaas Providing services to Enterprises §  Social authentication to SaaS and IDaaS Databases Directory Active Directory Commercial Applications In-house dev applications Legacy applications Social SaaS Multi-tenant IdP Private Cloud Multi-tenant SP

14. Mobile IAM for the Modern Web Web App Web App Login App OAuth2 Native App REST Native App OpenID Connect OpenAM Authentication Authorization Attribute Delivery Cloud Federation SSO Token Persistence Session Mgmt OAuth2 Provider Enterprise 14

15. SP to IdP Mesh IdP SP IdP SP IdP SP IdP

16. IdP Proxy IdP SP IdP SP SP IdP Proxy IdP IdP

17. Federation is more than SSO SAML 2.0 IdP, SP, IdP Proxy, Attribute Query Provider, Attribute Authority, Authentication Authority, XACML PEP, XACML PDP WS-Federation IdP, SP ID-FF IdP, SP OAuth 2.0 RESTful Authorization protocol OpenID Connect Uses OAUTH2 tokens, adds services

18. OpenAM + family OpenAM Full blown Federation OpenAM Fedlet Lightweight SAML 2.0 SP OpenIG and Fedlet Powerful combination of integration and SAML 2.0 Bridge SPE/SalesForce Bridge SAAS oriented federation/sync bridge, includes SAML 2.0 and OAUTH2.

19. Custom federation Reverse Proxy 1 3 Custom AuthN Module State 1 Policy Agent “Custom IDP” OpenAM Application 6 Policy Agent Application Application Application 2 SP IDP Fedlet Custom AuthN Module State 2 Custom Post Authentication Module 4 5 19

20. Walkthrough configure OpenAM to achieve SSO to Google Apps WordPress Office365 using SAML2

21. Federated Single Sign-On demo.openam.org IDP Circle of Trust SP SP SP

22. 2013 Open Stack Identity Summit - France Federation in practice

Federation in Practice

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Federation in Practice

Similar to Federation in Practice (20)

More from ForgeRock

More from ForgeRock (20)

Recently uploaded

Recently uploaded (20)

Federation in Practice