Dulanja Liyanage is an Associate Technical Lead at WSO2 who contributes to their Identity Server and platform security. WSO2 provides open source platform-as-a-service solutions and delivered the first open source API management and mobile solutions. Their Identity Server supports various identity federation standards and protocols to enable single sign-on across applications with different identity providers.

1. Last Updated: July. 2014
Associate
Technical
Lead
Dulanja
Liyanage
Borderless
Federated
Iden5ty

2. 2
About
the
Presenter
๏ Dulanja
is
an
Associate
Technical
Lead
at
WSO2
mainly
contribu5ng
towards
the
Iden5ty
Server
and
WSO2's
plaEorm
security.
Apart
from
that
he
has
also
par5cipated
in
several
onsite
customer
engagements
helping
them
to
realize
enterprise
use
cases.
๏ Email:
dulanja@wso2.com

3. 3
About
WSO2
๏ Global
enterprise,
founded
in
2005
by
acknowledged
leaders
in
XML,
web
services
technologies,
standards
and
open
source
๏ Provides
only
open
source
plaEorm-­‐as-­‐a-­‐service
for
private,
public
and
hybrid
cloud
deployments
๏ All
WSO2
products
are
100%
open
source
and
released
under
the
Apache
License
Version
2.0.
๏ Is
an
Ac5ve
Member
of
OASIS,
Cloud
Security
Alliance,
OSGi
Alliance,
AMQP
Working
Group,
OpenID
Founda5on
and
W3C.
๏ Driven
by
Innova5on
๏ Launched
first
open
source
API
Management
solu5on
in
2012
๏ Launched
App
Factory
in
2Q
2013
๏ Launched
Enterprise
Store
and
first
open
source
Mobile
solu5on
in
4Q
2013

4. 4
What
WSO2
delivers

5. A look into the past...
• Highly guarded oraganization borders
• User registration and profile creation a MUST
5

6. Welcome to the Present: Connected
Businesses
• Megers, acquisitions and partnerships
The analyst firm Quocirca confirms that in
Europe 58 percent transact directly with
users from other businesses and/or
consumers; for the UK alone the figure is
65 percent.
6

7. No more enterprises boundaries!
7

8. The Problem? Accepting the
UNKNOWN
8

9. Evolution of Identity Federation...
9

10. Different Userstores
User s identity is...
• maintained at one domain
• but accessed in different domains
10

11. Different Protocols
• SAML
• OpenID
• OAuth/OpenID Connect
• WS-Federation
• Custom
11

12. SAML
• SAML 1.0 (2002), SAML 2.0 (2005)
• Single Sign On / Single Logout
• Widely used *aaS providers [Google Apps,
Salesforce]
12

13.
OpenID
• Decentralized Single Sign On
• Single user profile
• Widely used for community & collaboration
aspects
• OpenID is dying
13

14. 14
OAuth/OpenID Connect
• OAuth for Identity Delegation
• OpenID Connect based on OAuth for
authentication
• Securing RESTful services

15. 15

16. 16

17. 17

18. Different User preferences
• Social login
Gartner predicts, by the end of 2015, 50%
of all new retail customer identities will be
based on social network identities.
18

19. The Solution?
• An Enterprise Identity Bus
• Capable of connecting various IdPs and do token
transformations from various protocols.
19

20. Chained Collaborative Federation
• Single sign-on across multiple web applications
supporting heterogenous standards/protocols
• Collaborative identity federation between multiple
heterogenous identity providers
• Home realm discovery
20

21. WSO2 Identity Server is an open source
Identity and Entitlement management
server, which supports SAML 2.0, OpenID,
OAuth 2.0, OpenID Connect, XACML 3.0,
SCIM, WS-Federation (passive) and many
other identity federation patterns.
21

22. WSO2 Identity Server 5.0 Architecture
22

23. 23

24. Demo
24

25. 25
Business
Model

26. Contact
us
!