Providing NextGen Identity Solutions in a Legacy World - CIS 2014
•Download as PPTX, PDF•
4 likes•1,177 views
Businesses are moving quickly to take advantage of the power of the cloud, mobility, and “The Industrial Internet.” At GE, these forces are changing the authentication landscape on a constant basis. But how do enable your business to take advantage of new technology while maintaining the services they still rely on? The presenter will explain the partnership formation between design teams and service delivery teams to leverage existing infrastructure and quickly operationalize new identity services like OAuth, SCIM, and OpenID Connect while also managing a 300% increase in traditional SAML-based integrations.
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (20)
Similar to Providing NextGen Identity Solutions in a Legacy World - CIS 2014
Similar to Providing NextGen Identity Solutions in a Legacy World - CIS 2014 (20)
Recently uploaded
Recently uploaded (20)
Providing NextGen Identity Solutions in a Legacy World - CIS 2014
- 1. Providing NextGen Identity Solutions in a Legacy World Steve “Hutch” Hutchinson SSO Service Leader, GE sehutchinson@gmail.com @IdentityHutch
- 2. Providing NextGen Identity Solutions in a Legacy World 22 Jul 2014 - Page 2 A disclaimer … The views and opinions expressed in this presentation are my own and do not necessarily represent the views or opinions of the General Electric Company or any of its subsidiaries.
- 3. Providing NextGen Identity Solutions in a Legacy World 22 Jul 2014 - Page 3 Thanks Daniel … no pressure
- 4. Providing NextGen Identity Solutions in a Legacy World 22 Jul 2014 - Page 4 A warning but they could be closer …
- 5. Providing NextGen Identity Solutions in a Legacy World 22 Jul 2014 - Page 5 SAML is dead? 0 100 200 300 400 500 2013 201420122011201020092008 SAMLIntegrations Year ! “SAML is not dead. It’s done. Which means we can use it.” - Dale Olds at CIS2013
- 6. Providing NextGen Identity Solutions in a Legacy World 22 Jul 2014 - Page 6 Getting from here to there
- 7. Providing NextGen Identity Solutions in a Legacy World 22 Jul 2014 - Page 7 Where is here? SSO LDAP Policy Decision Point Web Server Web Access Management Federation Server Agent Identity Federation SAML, STS, OAuth, OpenID Virtual Directory Interceptor Script LDAP Authentication Multi-Source Directory Views Web Agent B2B B2C HR System Active Directory 7500+applications 475+Federations 350+directories 5 million accounts ~500,000 accounts 18 policy sets Registration Apps
- 8. Providing NextGen Identity Solutions in a Legacy World 22 Jul 2014 - Page 8 Enter FastWorks
- 9. Providing NextGen Identity Solutions in a Legacy World 22 Jul 2014 - Page 9 Migration from data centers to cloud Web Server PDP Fed IdP Agent Shibboleth Plugin Traditional Web Access Management SAML Policy& User Stores
- 10. Providing NextGen Identity Solutions in a Legacy World 22 Jul 2014 - Page 10 Bring Your Own Identity (BYOI) Fed IdP User Store Web/App Server Select IDP ATTESTATION NETWORK PDP Shibboleth Plugin Agent SCIM
- 11. Providing NextGen Identity Solutions in a Legacy World 22 Jul 2014 - Page 11 The API economy Web/App Server API Registry OAuth Fed IdPXML Gateway
- 12. Providing NextGen Identity Solutions in a Legacy World 22 Jul 2014 - Page 12 Top drivers for Identity • Migration from data centers to cloud • Bring Your Own Identity (BYOI) • API economy • Mobile devices, access anywhere • Right-sized authentication • ABAC replacing RBAC • UX improvements • Industrial internet (Internet of Things)
- 13. Providing NextGen Identity Solutions in a Legacy World 22 Jul 2014 - Page 13 Barriers to new service offerings Service Design Service Delivery
- 14. Providing NextGen Identity Solutions in a Legacy World 22 Jul 2014 - Page 14 Building a unified, agile service team Service Design Service Delivery • Create change • Add or modify features • Create stability • Create or enhance services ENABLING the business!
- 15. Providing NextGen Identity Solutions in a Legacy World 22 Jul 2014 - Page 15 The big wins • Communication, communication, communication • Eliminate finger-pointing • Team engagement from concept to delivery • Delivery provides feedback loop for service improvement • Huge reduction in cycle times
- 16. Providing NextGen Identity Solutions in a Legacy World 22 Jul 2014 - Page 16 Questions? Steve “Hutch” Hutchinson sehutchinson@gmail.com @IdentityHutch
Editor's Notes
- Good afternoon. My name is Steve Hutchinson but please call me Hutch. I am the Single Sign-On Service Leader for General Electric, responsible for traditional web access management along with federation services that include SAML, OAuth, and OpenID Connect. Before I begin, I would also like to take this opportunity to introduce a couple of my colleagues as I will be referring to them throughout my presentation. The first is Jon Lehtinen, the SSO Service Delivery Leader responsible for creating standard integrations and federations as well as the care and feeding of the SSO infrastructure. I actually met Jon last year at the Cloud Identity Summit in Napa and we convinced him that he could fill an important role at GE. Sitting next to him is Patrick Lunney who is just completing a two-year leadership program which has exposed him to several different divisions at GE and we are thrilled that he has chosen to stay with our Web Access Solutions team when his rotation is complete. Patrick has been focused on leveraging federations services, specifically Oauth, to secure APIs within GE.
- I also bring you greetings from the General Electric legal department which requires me to inform you that “the views and opinions expressed in this presentation are my own and do not necessarily represent the views or opinions of the General Electric Company or any of its subsidiaries.” So let’s just remove that logo there <click>. So during my presentation I will be referring to a Generic Enterprise which I will occasionally abbreviate as ‘GE’. But, honestly, this presentation could refer to any Fortune 10 company <click> founded by a famous inventor, with half a million employees that is the world leader in engineering innovations and financial services.
- I’d also like to extend my thanks to our esteemed GE colleague Daniel Headrick. Nothing raises the bar on your first conference presentation ever like having the Chairman and CEO of the company sponsoring the conference you’re speaking at use the quote from the guy that used to have your job in his opening keynote address … and then use that quote as the theme for his entire presentation. So thank you Daniel. Just as an aside, if you are attending this presentation to get the next identity catch phrase, you will be sorely disappointed. Unless, of course, “you will be sorely disappointed” is the phrase you are looking for.
- I don’t know how many of you are attending your first Cloud Identity Summit this week but as a seasoned veteran of one other CIS conference, I wanted to give you some friendly advice. If you’re like I was at this time last year, you are currently experiencing a profound sense of euphoria and excitement. I’m sure you feel like you now possess a magical flaming sword that you can take back to wherever reality exists for you and use it to cut through red tape, destroy your roadblocks, and then plant in the ground where it will sprout forth ideas to carry your organization into the future of identity. Not so much. Turns out that sword is getting its power from the collective knowledge and passion of those collected here at the Summit and therefore its power really only extends to about a 5-mile radius from the conference center. However, what you are building this week, and what you can take home with you, is a vision of where you want to be. And a vision, built on expert knowledge and actually possible technology, is an incredibly powerful thing. Because that vision can help us form a goal. And if we can keep that goal in our heads, and in the heads of our team and thought leaders back home, the tactical activities that we do every day to keep the business running can become steps that constantly bring us a little bit closer to that goal. So, I encourage you to keep that excitement and passion stoked throughout the year by not just remembering what you learned this week but by building networks of experts. Keep track of the people whose presentations resonated with you and follow them on Twitter. Find out how to join an organization like the IDESG if their goals align with your goals. Keep that sword’s power burning until we can all come together again. So the solutions that you see here this week might not be as close for you as you would like, but don’t worry. <click> They could be closer than you think they are.
- And I know I’m a year too late but I’ve always wanted my own ‘SAML is dead’ slide.
- Disconnect between design and delivery Results in conflicts and inefficiencies Design team not deploying consistently Delivery motivated to resist change Design is agile Delivery is static