OpenAM Consortium
Tokyo JapanFeb 2014
Allan Foster CTO OfficeIRM
2013Future2

IRM Origin Story …

3

Evolution of Identity
Relationships
ThingsAttributes
Context
StatelessConsumers
Employees &Partners
Employees

Perimeter

Perimeter-lessFederation
CloudSaaS
Mobility
Perimeter-lessFederation
Cloud / SaaS

Perimeter
Federation

4

Identity RelationshipManagement Business Values …
■ CONSUMERS & THINGS over employees only
■ ADAPTABLE over predictable■ TOP LINE REVENUE over operating expense■ VELOCITY over process and tools

5

CONSUMERS & THINGS
over employees only
6

ADAPTABLEover predictable
7

TOP LINE REVENUE
over operating expense
8

VELOCITY
over process and tools
9IRM Technical Emphasis …
■ INTERNET SCALE over enterprise scale■ DYNAMIC INTELLIGENCE over static intelligence■ BORDERLESS over perimeter■ MODULAR over monolithic

10

INTERNET SCALE
over enterprise scale
11

DYNAMIC INTELLIGENCE
over static intelligence
12

BORDERLESS
over perimeter
13

MODULAR
over monolithic
14

ForgeRock Technical Vision …

Next Generation
Identity & Access
Management for theModern Web
15

Our Open Identity Stack

Platform agnostic forEnterprise, Social, Mobile,& Cloud Environments

Modular & Embeddable
for Cloud Providers



Massively Scalable forExternal Enterprise
Customers andprivate /public clouds

One common API to access
ALL services

FORGEROCK.COM | CONFIDENTIAL

16

Open Identity Stack
OpenAM

OpenDJ

OpenIDM

BridgeSPE

Commercial Open Source Identity Services
Authentication

Federation

Entitlements

Provisioning

Synchronization

DirectoryServices

Authorization

Risk Engine

Web Services
Security

Workflow

Password
Management

Directory Proxy

Policy Engine

Session Failover

Strong AuthN

Password Reset

Role
Provisioning

Replication

FORGEROCK.COM | CONFIDENTIAL

17OpenAM
“All-in-One” solution delivered
as a single application

Access to any application –Enterprise, SaaS, Social, MobileFlexible and extensible architecture

Social sign-on and one-time mobilepassword

Architected for consumer scale -+100M users

FORGEROCK.COM | CONFIDENTIAL

18

OpenAMKey Features

Benefits■

Session Fail-Over architectureusing embedded OpenDJ■

Provides the highest level of HA toensure users are always online■

Full Oauth 2.0 and OpenID
Connect 1.0 support■

Latest protocols for simplified
Federation and Mobile SSO■

Device Fingerprinting adaptive
authentication support■

Adds advanced authentication module
for fraud prevention■

Complete Mobile development
support through REST APIs■

Create device agnostic applications
for a Web or a native O/S apps■

OATH device and One Time
Password support■

Use mobile phone as a second factor
using either SMS or Soft-Tokengenerator

FORGEROCK.COM | CONFIDENTIAL

OpenIDM
Lightweight provisioning built
on REST principles

Flexible architecture withpluggable workflow engineStandards based APIs andscriptingArchitected for consumer
scale with +100’s ofcreates/second

FORGEROCK.COM | CONFIDENTIAL

20

OpenIDM
Key FeaturesBenefits■

Modern architectural design
built on the OSGi framework■

Lightweight approach reduces
deployment and development costs■

Purpose built for high scaleconsumer applications andservices■

Provides easy to implement
provisioning, syncing for online
services such as banking, insurance…

■

Flexible data model and data
store

■

Reduces time and cost by leveraging
existing model for managing data■

Program business logic using
Java or Groovy■

Standards based languages enable
faster development and zero lock in■

Customizable UI using JSONand REST■

Decoupled UI enables easydevelopment of custom-tailoredsolutions
FORGEROCK.COM | CONFIDENTIAL

OpenDJLightweight / embeddable
directoryLDAP / REST APIs

High availability &replication

Architected for massive
scale -- +100M Users

FORGEROCK.COM | CONFIDENTIAL

22

OpenDJKey Features

Benefits■

Java based architecture
designed for scale andperformance■

Architecture supports the mostdemanding environments withhigh throughput■

Supports HA deploymentswith N-way multi-master
replication■

Enables global data center
deployment for managing failoverand disaster recovery■

Developer friendly LDAP to
REST Gateway developertool■

Exposes directory data as JSON
resource enabling access for nonLDAP apps■

RESTful API developeraccess■

Simplifies by using standard REST
for managing all core functions

FORGEROCK.COM | CONFIDENTIAL

ForgeRock Identity Bridge SPE
Secure connection between On-Premise & Cloud infrastrcture

Ease adoptionof cloudservices andreduceenterprise /cloud friction

Business Impact

Technical Approach•Cloud Service Providers:•Increase service adoption byeliminating IDs andpasswords.

Turnkey software appliance forprovisioning, federating and synchingidentities between enterprise customers
and the services they offer•Enterprise: Eliminate
copious amounts of time
onboarding new cloudservices.

Designed to be easily modified to match
service provider's brand and application
look and feel, and to seamlessly integratewith existing service offerings•

FORGEROCK.COM | CONFIDENTIAL

24

Identity Bridge SPE
Key Features

Benefits

 Simple wizard based
administration■ Enables 15 minute setup andconfiguration

 User provisioning engine
with account reconciliation

 Instantly add and remove users
and sync in changes in real-time Federated SSO usingSAML Single Sign-on using SAML-basedfor secure connections

 Designed as a software
appliance Deploys with any IAM
Infrastructure in the DMZ

 Windows support for SSO
to SaaS service

 Leverages standard Integrated
Windows AuthN and Kerboros Flexible configuration

 Can be customized for manydifferent SaaS and data stores
FORGEROCK.COM | CONFIDENTIAL

Our IRM Platform …

ForgeRockOpen Identity
Stack26

ForgeRock Today
Building Relationships Across the Web
PEOPLESYSTEMSCONTEXT

THINGSDEVELOPMENT

Create users /things

Authentication

IP Risk-based
Authentication

Enterprise Apps

Modular Services

Delete users /thingsCoarse-grained
Authorization

DeviceFingerprinting

Mobile Apps

Common REST

Synchronization

Fine-grained
Authorization

One-Time Mobile
Password

Social Apps

Session Failover

Password
Management

Federated SSO

StrongAuthentication

IP-Connected
Devices

Data Replication

Workflow

Web Services
Security

Bridge for Cloud
Providers

FORGEROCK.COM | CONFIDENTIAL

27

ForgeRock Tomorrow
Building Relationships Across the Web
PEOPLESYSTEMSCONTEXT

THINGSDEVELOPMENT

Create users /thingsAuthentication

IP Risk-based
Authentication

Enterprise Apps

Modular Services

Delete users /things

Coarse-grained
Authorization

DeviceFingerprintingMobile Apps

Common REST

Synchronization

Entitlements

One-Time Mobile
Password

Social Apps

Performance

Password
Management

Federated SSO

StrongAuthentication

IP-Connected
DevicesMulti-Tenant

Workflow

REST Token
Service

Risk Analytics

Bridge for SFDC

Mobile Security
Gateway

Role-based
Provisioning

Risk-Based
Authentication

Simplified Social
Sign-On

Bridge forEnterprises

Monitoring

Bridge for Enterprises

28

ForgeRock Roadmap
2015 STACK ROADMAP
OpenDJ: Virtual Directory
OpenAM: Knowledge-based Authentication
Risk Analytics (NEW)Mobile Identity Management Phase 2 (NEW)

2015

2014

2014 STACK ROADMAP
1H2014OpenIDM: Role-based ProvisioningOpenDJ: Identity Proxy
OpenAM: Simplified Social Sign-on 22H2014
Bridge Enterprise Edition (NEW)Mobile Identity Management Phase 1 (NEW)FORGEROCK.COM | CONFIDENTIAL

29

ForgeRock Momentum• 800% sales growth fromQ4FY12 to Q4FY13• 207% sequential sales growthfrom Q3FY13 to Q4FY13• Average deal size is up 166%
Year over Year.
• Revenue continues to be
distributed evenly between
North America and Europeanmarkets.

Business is Skyrocketing30Marquee Customers

FORGEROCK.COM | MARQUEE CUSTOMERS

31

Government of NorwayProviding 4M citizens access to 300+ Government services
TaxOfficeWater &Energy
Directorate

HealthEconomics
Agency“OpenAM’s simple, secureaccess to government services
played a large part in thesuccess of the eGovernment
initiative”
TOR ALVIK, COO
Agency for Public
Management & eGoverment

Labor& Welfare
Agency5 million citizens access • Over 1 million concurrent users • 500k businesses access
FORGEROCK.COM | CONFIDENTIAL

32

Government Success …

Canada(35M Citizens)

The Vatican(~1000 Citizens)

Belgium(11M Citizens)

New Zealand(650K citizens)

Norway(5M Citizens)

New Caledonia(256K Citizens

Enabling Government Services Globally!

FORGEROCK.COM | CONFIDENTIAL

33

Toyota User Portal
Authenticating more than people—cars & devices included

12Automobile
Authentication

Application & Data
Synchronization
Powered by ForgeRock
FORGEROCK.COM | CONFIDENTIAL

34

Thank You!