OpenAM product manager Andy Hall covers some of the major new components in OpenAM 12.0, such as the Scripting Engine, Policy Editor, XUI user interface framework, and Secure Token transformation service. The webinar can be watched here: http://go.forgerock.com/webinar-openam-12.html

1. Introducing OpenAM 12.0

2. 2
Andy Hall
OpenAM Product Manager

3. 3
Session Contents
■ Setting the scene
■ Live Demos
■ Q&A

4. 4
Background

5. 5
Background

6. 6
Background

7. 7
Background

8. 8
EMPLOYEE FOCUSED
CUSTOMER FOCUSED
customers suppliers Devices Things
employees partners contractors compliance
>1,000,000
<50,000
ENTERPRISE SECURITY PERIMETER
~ PROJECT SIZE
~ PROJECT SIZE
Users and Devices
Users and Devices
Apps
IRM
IAM

9. 9
OpenAM 12 Design Goals
■ Simpler
– Easier to Use
– Faster to deploy
■ Smarter
– Contextually aware
– Richer authorization
– Assist Mobile developers

10. 10
Demo

11. 11
User Self-Service
■ Registration
■ Profile
■ Password Reset
■ Trusted Devices
■ Authorized Apps

12. 12
Social Authentication
■ Easy “friction-free”
authentication for users
■ Easy wizard-driven
configuration for admins
■ OAuth2/OIDC standards

13. 13
Contextual Authentication
■ Risk-based determination of Authentication level
required
■ Leverages new Script Engine
■ Highly customizable
■ Extensible Device ID

14. 14
Policies and Entitlements
■ Powerful Policy Engine
■ Easy to use Policy Editor
■ REST Policy APIs
■ Export/Import XACML

15. 15
REST STS
■ Token Transformations
Input Output
UNT SAML2
SSO Token SAML2
OpenID Connect SAML2
X.509 SAML2
OpenAM
REST-STS
SAML2OIDC

16. 16
OAuth2/OpenID Connect
■ User-controlled revocation of tokens
■ Social Authentication
■ JWT Profile for OAuth2
■ OIDC as Authorization Subject
■ OAuth2 Scope as Authorization
Conditions
■ OIDC Mobile Profile
OpenAM
REST-STS
OIDC-MP

17. 17
OpenAM 12 by Audience
Users Administrators Developers
Self-service… Contextual scripted authentication Extended REST API set …
Registration Device Identification Users/groups/realms/agents
Password reset Fine-grained authorization policies Sessions
Profile management Powerful new Policy Editor Policies
Trusted devices Export/Import of policies to XACML Token transformations
OAuth2 token revocation Extended Auditing OAuth2 and OpenID Connect
Social authentication Syslog support Serverinfo
Contextual authentication Improved session handling/monitoring OpenID Connect Mobile Profile
XUI CORS Support REST API versioning
New platforms New platforms

18. 18
Next Steps
https://twitter.com/ForgeRock
http://www.linkedin.com/company/forgerock
https://www.youtube.com/user/ForgeRock
https://vimeo.com/forgerock
http://forgerock.com/resources/

19. Q&A