Welcome

OpenAM SummitTokyo Japan
October 2012

Allan Foster
VP Community

What’s Happening?
• Release Model• Community Activity• OpenIDM• OpenDJ• OpenAM

Xpress and Final Releases
Xpress Release
Integrates the latest features available
Tested in detail, but not as thoroughly as a final release
Supported by ForgeRock subscriptions
Upgradeable to final
Final Release
Integrates all the features of the previous Xpress release plus additional features
Thoroughly tested
Supported by ForgeRock subscriptions
Upgradeable

Community Activity• Maven• Artifactory• IRC/Mailing Lists• GIT• Contributions• Packagers

OpenIDMRoadmap

Historic Evolution
Q1, 2011

Q2, 2011

Milestone
Milestone 11

Milestone
Milestone 22Features

Features• Core Architecture basedon OSGi• Flexible Repository• REST API supporting
CRUD• Connectors- Enhanced TAM- FlatFile ActiveSync- Scripted SQL

Reconciliation andDiscovery Engine
 Logging Bulk operations
 JavaScript driven Rules

JDBC Repository
ModuleQ4, 2011
Release
Release 2.0
2.0Features• Bi-directional unified Links• Password Synchronization• Reporting & auditing
enhancements• Authentication &Authorization• JavaScript Debugger• Resource Configuration
Wizard• Embedded BPMN 2.0
Workflow (Experimental)✓✓✓CoreCore Framework
Framework forfor
provisioning
provisioning

Discovery
Discovery andand Reconciliation
Reconciliation
EngineEngineCore
Core Identity
Identity Management
Managementsystemsystem

OpenIDM Roadmap
Q4, 2012

Q2, 2013

Q4, 2013

Q2, 2014

2.1
2.1 Xpress
Xpress

2.1
2.1

2.2
2.2 Xpress
Xpress

2.2
2.2Features• Scripting Engine
Enhancements• Discovery Engine
Optimizations• Clustering Support• More advanced AD
Integration• Workflow andBusiness Process
support• PasswordManagement• End User Dashboard• SAP HR Connector• Ad Hoc reconciliation

FeaturesFeatures

Aggregated View
 Object Model Organizations
 Role BasedProvisioning Administrator UIAdvanced Reporting PowerShellConnector
 Cloud Integration
 Multiple accountslinking
 SCIM support

Features
Attestation and Recertification
 Segregation of Duty
Policy EngineOpenIDM 2.1 Xpress•Scripting Engine Improvements•Discovery Engine Optimizations•Clustering Support•More advanced AD Integration•Workflow and Business Process support•Password Management•End User Dashboard•SAP HR Connector•Ad Hoc reconciliation

OpenIDM 2.1Aggregated View
Object ModelOrganizations
Role Based ProvisioningAdministrator UIOpenDJRoadmap

OpenDJ Roadmap
July,
2012

Q4,
2012

2.5.0 Xpress
Features•Delegation ofauthentication (passthrough) for AD•Optimistic Concurrency
Control•Access log filtering andpresentation•Stronger Referential
Integrity enforced

Q2,
2013

3.0

2.5
Features
HTTP REST / JSON
interface to theDirectory•Native Packages forLinux•Simpler Upgrade•LDAP Client SDK andToolkit
•

Q2,
2014

FeaturesDirectory ProxyServices

4.0
Features
Virtual Directory
LDAP connectors
Database connectors•File connectors•Join from different datasources•

Load balancing andfailover•Health check and HA•Chaining•Data mapping andtransformation•Client filtering rules•Connection throttling•Data distribution•Horizontal Scalability••

Web based
Administration Console

OpenAMRoadmap

OpenAM Roadmap
Q4, 2012

Q2, 2013

Q4, 2013

Q2, 2014

OpenAM 10.1
Xpress*OpenAM 10.1

OpenAM 11.0
Xpress*OpenAM 11.0

OAuth 2.0 Provider•Core Token Service
Phase 1
•User Self-Service
sharing OpenIDM
modules•Cloud Ready Login Page
•Tomcat 7 Agent,
OWA/IIS Agent, NGINX
Agent

•

Xpress features
Plus•Cloud dashboard•Cloud connectors•REST APIs•XACML 3 Editor•User Management
delegation•OATH Authentication
module•Risk BasedAuthentication Phase 2•Generic RDBM UserData Store•Multi-tenancy
enhancements•Core Token ServicePhase 2•Authentication
configuration wizards•

Xpress featuresPlus•Risk BasedAuthentication Phase 3•STS enhancements•OAuth 2.0 End User
console•Monitoring dashboard•Policy Agent
Configuration Wizard•OpenIG Configuration
Wizard•Note: The roadmap is subject to changes

ForgeRock Confidential

OAuth2••••••

OAuth 2.0 Provider
OAuth 2.0 Authorization Server Functionality
REST interfaces for end user token management
Access Tokens stored in the CTS
Simple Personal Profile protected REST app
Token Admin Sample PageOAuth2 Flows•

Authorization Code Flow
– Access Code to the app via user‐agent’s redirect– Access Token from AuthZ Server using Access Code•Implicit Flow
– Implicit Access Token returned after authentication and grant•

Resource Owner Password– User passes his/her credentials to the client application, and the application
obtains an access token– High level of trust for the application•Client Credentials Flow
– The client application authenticates itself to the AuthZ Server and obtains anaccess token•

SAML 2.0 Bearer Token (OpenAM 10.1 Final)– The client application presents a SAML 2 Assertion as credentials to obtain anaccess token from the AuthZ ServerOAuth2 Architecture

Q&A

OpenAM SummitTokyo Japan
October 2012