OpenIDM 3.0 is ForgeRock's identity administration product for users, devices, and things. It features a lightweight, modular architecture built on RESTful principles with extensibility through scripting languages like JavaScript and Groovy. The core use case functionality includes basic CRUD, automated workflow processes, provisioning, password synchronization, identity data synchronization, reporting, self-service, and entitlement management. It has a flexible "plug and play" architecture where modular services can be used individually. Key features in 3.0 include role-based provisioning, an aggregated identity view, pass-through authentication, cloud connectors, user interface enhancements, product enhancements like clustering and high availability, and scripting language improvements.

1. OpenIDM 3.0
Identity Administration for Users,
Devices and Things
Anders Askåsen, Senior Technical Product Manager

2. 2
Evolution of Identity
Employees
Consumers
Employees &
Partners
Things
Perimeter
Perimeter
Federation
Perimeter-less
Federation
Cloud / SaaS
Perimeter-less
Federation
Cloud
SaaS
Mobility
Attributes
Context
Stateless
Relationships

3. 3
OpenIDM
 Lightweight provisioning
 Next generation modular
architecture
 Built on resource oriented
principles
 Highly extensible
 Self contained

4. 4
OpenIDM: Target Use Cases
■ Embeddable
– Account Management
– Self-Service
■ Extranet / Customers / Partners /
Suppliers
– Large scale user management
– Federated provisioning [Bridge]
■ Enterprise
– Sun IDM replacement (for target use cases)
– Internal & External (hybrid) environments

5. 5
Core Use Case Functionality
• Basic CRUD via RESTful API
• Automate (digitize) workflow processes
• Authoritative-source [HR] provisioning
• Password synchronization (AD intercept)
• Synchronize identity data
• Reporting & Compliance
• Self-service and password management
• Profile & entitlement management

6. 6
Flexible Architecture
“Plug & Play” Architecture
■ All services are designed as
standalone modular
resources.
■ Use & run only those
modular services needed.
■ Examples of Modularity:
– Repository
– Reporting
– BPM / Workflow Engine
– Scripting languages
Embeddable Architecture
■ Tiny footprint and 100%
open source for embeddable
IDM
■ Out-of-the-box REST
interfaces that use standard
development tools for all
programming languages
(e.g. -- Java, C, Perl, PHP,
Ruby, Groovy, etc)

7. 7
Simple API & Scripting Model
REST API
■ Manage all core functions
using REST– UI, user admin,
sync, reconciliation.
■ Mirrors World Wide Web, and
uses HTTP protocol –
something ALL developers
understand
■ Platform and language
independent for enterprise,
cloud, social and mobile
environments.
JavaScript and Groovy
Scripting
■ Super friendly languages for
scripting custom rules and
business logic.
■ Standard scripting languages
attractive to massive number
of developers.
■ Scripting approach is agile,
lightweight and can be
dynamically modified at run-
time.

8. 8
OpenIDM 3.0 Highlights
FORGEROCK.COM | LEGAL INFORMATION

9. 9
OpenIDM 3.0
Key Feature: Role-Based Provisioning
• OpenIDM exposes a new
managed object called Managed
Role that can be assigned
implicitly via business logic or
explicitly.
• Allows a consistent assignment
and removal of entitlements and
resources via a role based
approach.

10. 10
OpenIDM 3.0
Key Feature: Aggregated View (first cut)
• Provides visibility into the "link"
tables.
• Aggregates identity information
into a single view accessible via
an endpoint.
• GET
https://localhost:8443/op
enidm/endpoint/linkedView
/managed/user/bjensen

11. 11
OpenIDM 3.0
Key Feature: Pass-thru Authentication
• Support pass-through
authentication to (nearly) any
remote Resource.
• When configured, users can login
to the UI based on their external
credentials.

12. 12
OpenIDM 3.0
Key Feature: Cloud Integration and Connectors
• New OpenICF Cloud Connectors
- Flexible Scripted Connector
- PowerShell
• New OpenICF 1.4 Framework
- A widened community
- Performance
- Better error handling
- Complex object representation

13. 13
OpenIDM 3.0
Key Feature: User Interface Enhancements
• Easier to customize the OOTB UI with an
expanded folder structure
• Customizations can be made without
editing default UI files
• Configuration-based theming options -
color values, background image paths,
and a few other common styling values.
• Performance enhancements to manage
high scale environments.

14. 14
OpenIDM 3.0
Key Feature: Product Enhancements
• Out of the box Cluster Configuration
and High Availability
• Workflow defaults and samples,
including:
• User on-boarding/off-boarding
• Password Change Reminders
• Manager-Subordinate Certification
• Manual Matching and Linking
• Orphan Account Detection
• End-user Access Request

15. 15
OpenIDM 3.0
Key Feature: Scripting enhancements
A lot more power with Groovy as a product wide scripting language.
A richer ecosystems with prebuilt components.
Interoperability with JVM is seemless with in your scripts!
Powerful development environment
Modular component development – maintainable code base, reuse code.
Completely dynamic script loading
Optimize caching
Business Value: Quicker to deploy, Quicker to customize, Easier to work with,
Faster.

16. 16
Q & A
FORGEROCK.COM | LEGAL INFORMATION