Mobile SSO using NAPPS

•Download as PPTX, PDF•

3 likes•4,453 views

Ashish Jain

Mobile SSO using NAPPS - OpenID Connect profile for native apps

Technology

© 2014 VMware Inc. All rights reserved.
Mobile SSO using NAPPS
Ashish Jain
@itickr
CIS 2014

Why is this important ?
0
300
600
900
2009 2010 2011 2012
Smartphones and tablets PC shipments
of information workers use
three or more devices for
w o r k t o i n c r e a s e
p r o d u c t i v i t y
EXPLOSIVE
GROWTH
in shipments of
smartphones and tablets
Sources: IDC, BGR, Forrester
FLAT
pc shipments
New Device Platforms New Apps New User ExpectationsNew Device Platforms
BYOD & JIT

The Changing Device Mix
148 141
202 240
128
352
722
1516
0
1000
2000
2012 2017
Smartphone
Tablet
Portable PC
Desktop PC
Source: IDC's Worldwide Smart Connected Device Tracker Forecast Data, February 28, 2013
Connected Device Market by Product Category,
Shipments, 2012-2017 in Millions

The Changing Device Mix
Source: IDC's Worldwide Smart Connected Device Tracker Forecast Data, September 11, 2013
By 2017, 87% of connected devices will be smart phones and tablets

App 1
AD
Policy
Server
App 2
App 3 App 1
AD
Policy
Server
App 2
App 3

App 1
AD
SAML
IdP
App 2
App 3 App 1
AD
App 2
App 3
Policy
Server
SAML
RP
Policy
Server
SAML

App 1
AD
SAML
IdP
App 2
App 1
AD
App 2
App 3
Policy
Server
SAML
RP
Policy
Server
SAML
App 3SAML RP

App 1
AD
SAML
IdP
App 2
App 1
AD
App 2
App 3
Policy
Server
SAML
RP
Policy
Server
SAML
iOS App
App 3SAML RP

App 1
AD
SAML
IdP
App 2
App 1
AD
App 2
App 3
Policy
Server
SAML
RP
Policy
Server
SAML
OAuth AS
iOS App
App 3SAML RP

App 1
AD
SAML
IdP
App 2
App 1
AD
App 2
App 3
Policy
Server
SAML
RP
Policy
Server
SAML
iOS AppiOS App
OAuth ASApp 3SAML RP

App 1
AD
SAML
IdP
App 2
App 1
AD
App 2
App 3
Policy
Server
SAML
RP
Policy
Server
SAML
iOS AppiOS App
OAuth
AS
OAuth ASApp 3SAML RP

App 1
AD
SAML
IdP
App 2
App 1
AD
App 2
App 3
Policy
Server
SAML
RP
Policy
Server
SAML
iOS AppiOS App
OAuth
AS
OpenID
Connect
OpenID
Connect
OAuth ASApp 3SAML RP

Mobile App Auth Flow
1
2
4
3
SAML
IdP RP / RS
AD
Mobile
App
AS
5
6
7
OAuth

Mobile
App
Mobile App(s) Auth Flow
1
2
4
3
SAML
IdP RP / RS
AD
Mobile
App
AS
5
6
7
OAuth

Mobile
App
Mobile App(s) Auth Flow
1
2
4
3
SAML
IdP RP / RS
AD
Mobile
App
AS
5
6
7
OAuth
Issues
 Authentication per Mobile App.
 No invalidation of access token
 No clean up of offline/cached data on device

Where are we today ?
• Layer 7
• Centrify
• Samsung Knox
• Google Auth

Deployment Models
• Enterprise in-house native apps
• Native App for a SaaS provider
• Multiple native apps for a single SaaS provider

NAPPS Terminology
• Token Agent: Native app that obtains access tokens on behalf of
other native apps
• AppInfo Endpoint: Endpoint to obtain metadata about apps
• Primary Token: OAuth token obtained by TA for its own use
• Secondary Token: OAuth token obtained by TA on behalf of other
native app

Mobile App SSO
1
23
SAML
IdP RP / RS
AD
Mobile
App
AS
5
9
OAuth
Token
Agent
3
PT
6
ST
4
5 7
8

What's hot

Wearable Internet Chicken: Exploring the Android Wear Datalayer API

kirgy

apidays LIVE Singapore 2021 - Digitisation, Connected Services and Embedded Finance April 21 & 22, 2021 Securing the Open Source supply chain Liran Tal, Director of Developer Advocacy at Snyk ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

apidays LIVE Singapore 2021 - Securing the Open Source supply chain by Liran ...

apidays

Financial services rely on APIs

Rogue Wave Software

Real-time data with a VaadinDrone in Bluemix at IBM InterConnect 2015

Fredrik Rönnlund

Zebra Technologies | On designing for the internet of things

Ian Manger, MBA

Trust No One: The New Security Model for Web APIs - SecTor talk by Greg Kliew...

CA API Management

Many innovations come from the aeronautical sector; our software technology is based on a proprietary API (Application Programmable Interface) that is setting the standards to build customized monitoring applications for the industrial market. Any vector graphic designed with standard tools on the market like Adobe illustrator™, Inkskape™, ... can be animated with our API to build a real time monitoring application. Works with ACARS, QAR data. Works with CSV,XML,JSON.

WE MAKE GRAPHICS BECOME WEB APPS

Jean-Philippe Beaujard

Null pune 1st March-news bytes

n|u - The Open Security Community

Keynote Appdays. November 2014. Paris Découvrez comment les géants du mobile ont rencontré succès et réussite grâce à la plateforme Facebook. Apprenez comment Deezer, Blablacar et Edjing ont construit leur succès sur la plateforme Facebook. Facebook offre une variété de produits qui permettent aux développeurs de se concentrer sur ce qui est le plus important: leur app (conférence partenaire).

Big on Mobile, Big on Facebook. How the European super startups did it.

Julien Lesaicherre

APIs are a wonderful thing and bring many benefits, but by their very nature they are also a window into how your business operates. If someone can exploit your system for gain, they will. This presentation will give multiple real examples of API abuse in the wild, via methods such as data scraping, service misuse/cheating, unauthorized aggregation and fake account creation. How is it done, how are existing API controls bypassed, and what are the business implications? The audience will learn that API abusers are inventive and they use smart tools. The audience will also learn who some of these API abusers are, and may be surprised by the result. (Spoiler: they can be your customers!) Finally, some guidance will be given around what additional access controls can be put in place to ensure API based businesses continue to prosper.

Is Your API Being Abused – And Would You Even Notice If It Was?

Nordic APIs

What is Android L ?

E2LOGY

Android 6.0 Marshmallow - Top 4 Enterprise Features

Rishabh Software

The state of mobile app security

Mahima Anand Sharma

Wonderware InTouch

Omair Tariq

Ambient Intelligence - Parham Beheshti

WithTheBest

If you are in the growing app and SaaS market, you will know all too well about the critical issues surrounding user security and pricy. Since 2005, Two Factor Authentication has had a growing increase in interest, usage and adoption by businesses and users, as privacy and safety of our online lives becomes more important. Just looking at Google Trends shows that Two Factor Authentication is here to stay, and the forecast shows promising growth.

What about Two Factor Authentication?

Sinch

APIDays Finland 2019 - How to Choose the Ultimate AI Platform

Merja Kajava

Android app installation-dropbox

Maxpromotion

apidays LIVE New York 2021 - Playing with FHIR without getting burned by Dav...

apidays

OWASP’s 2017 top ten adds a new category called 'underprotected APIs', reflecting the growth of RESTful Web APIs and richer front-end clients which stress current security and access authorization approaches. You’ll learn about potential threats resulting from undersecured Web APIs and techniques to strengthen your API security posture. You'll gain a clear understanding of user authorization via OAuth2, software authorization via static API keys and the critical interplay between them. Of particular concern are mobile API consumers whose code is statically published with secrets which are often poorly concealed. Practical advice with code examples will show how to improve mobile API security. TLS is necessary but insufficient to fully secure client-server communications. Certificate pinning is explained with code examples to show how to strengthen channel communications. Some advanced techniques will be discussed such as app hardening, white box cryptography and mobile app attestation. You should gain a good understanding of the underprotected API problem, with some immediately practical tips to improve your API security posture and a sense of emerging tools and technologies that enable a significant step change in API security.

LF_APIStrat17_OWASP’s Latest Category: API Underprotection

LF_APIStrat

What's hot (20)

Wearable Internet Chicken: Exploring the Android Wear Datalayer API

apidays LIVE Singapore 2021 - Securing the Open Source supply chain by Liran ...

Financial services rely on APIs

Real-time data with a VaadinDrone in Bluemix at IBM InterConnect 2015

Zebra Technologies | On designing for the internet of things

Trust No One: The New Security Model for Web APIs - SecTor talk by Greg Kliew...

WE MAKE GRAPHICS BECOME WEB APPS

Null pune 1st March-news bytes

Big on Mobile, Big on Facebook. How the European super startups did it.

Is Your API Being Abused – And Would You Even Notice If It Was?

What is Android L ?

Android 6.0 Marshmallow - Top 4 Enterprise Features

The state of mobile app security

Wonderware InTouch

Ambient Intelligence - Parham Beheshti

What about Two Factor Authentication?

APIDays Finland 2019 - How to Choose the Ultimate AI Platform

Android app installation-dropbox

apidays LIVE New York 2021 - Playing with FHIR without getting burned by Dav...

LF_APIStrat17_OWASP’s Latest Category: API Underprotection

Viewers also liked

Mobile Single Sign-On: OAuth 2.0, OpenID Connect, NAAPS, why doesn’t anything work and can we do better? -- Brian Campbell, Ping Identity - - - Mobile computing has grown at an unprecedented rate in recent years while innovations in identity and Single Sign-On on mobile have lagged behind. We'll look at the state of native mobile application SSO including applicable standards such as OAuth 2.0, OpenID Connect, and NAAPS, and try to better understand the bigger picture of what's happening and what might be done to improve things. -- from 2015 http://gluecon.com/

Mobile Single Sign-On (Gluecon '15)

Brian Campbell

IBM Single Sign-On

Van Staub, MBA

I den här presentationen diskuteras begreppet tjänsteplattform, e-tjänsteplattform, "kommunal tjänsteplattform" och vad den plattformen egentligen behöver innehålla för att svara upp mot en hållbar e-utveckling. Med hållbar avses här att göra rätt från början, att inte måla in sig i ett hörn, att inte hamna i en återvändsgränd - bara för att man inte hade hela bilden klart för sig när man startade. Och det går att börja smått, ändå. Med enkla e-tjänster.

Tjänsteplattform i mtg - 2014 02-05

Advania

SäKerhet I Molnen

Predrag Mitrovic

2. Day 2 - Identify and SSO

Huy Pham

Twobo LDAP Attribute Store for ADFS

Twobo Technologies

Neo-security Stack

Twobo Technologies

Alfresco Summit 2013 (Barcelona and Boston) This talk will provide an introduction to the OASIS SAML standard (Security Assertion Markup Language) and then describe in detail how we use OpenSAML to provide secure SSO to Alfresco Cloud in a multi-tenant environment, both in terms of Share and the core Repository. We will demonstrate the steps required for an Enterprise Network Admin to setup a trusted SAML connection ('circle of trust') to their chosen Identity Provider (IdP) such as Centrify, Ping Identity, ForgeRock OpenAM (formerly Sun OpenSSO) or potentially any other type of IdP that supports SAML v2.0. We will also discuss possible future requirements and improvements. http://summit.alfresco.com/boston/sessions/implementing-secure-single-sign-sso-opensaml http://www.youtube.com/watch?v=KroIZa1co6g

Alfresco: Implementing secure single sign on (SSO) with OpenSAML

J V

CIS13: Mobile Single Sign-On: Extending SSO Out to the Client

CloudIDSummit

Single Sign On - Case Study

SINGLE SIGN-ON

SSO - SIngle Sign On

SSO introduction

Oauth2.0

AWS Directory Service and Hybrid Strategy | AWS Public Sector Summit 2016

Amazon Web Services

This slide deck gives an introduction to OAuth 2.0, starting with some concepts, explaining the flow plus a few hints. The reminder of the slides are about implementing an OAuth 2.0 server using the Apache Amber library (renamed to Apache Oltu lately). My impression is that many developers shy away as soon as they hear "security" and so I did not only want to talk about the concepts of OAuth 2.0 but also wanted to show how easily you can implement an OAuth 2.0 server ... hope it reduces the fear of contact a bit ... ;-)

OAuth 2.0

Uwe Friedrichsen

Single sign on

Rob Fitzgibbon

Federation in Practice

ForgeRock

Nordic APIs - Building a Secure API

Twobo Technologies

OAuth and OpenID Connect for Microservices

Twobo Technologies

Viewers also liked (20)

Mobile Single Sign-On (Gluecon '15)

IBM Single Sign-On

Tjänsteplattform i mtg - 2014 02-05

SäKerhet I Molnen

2. Day 2 - Identify and SSO

Twobo LDAP Attribute Store for ADFS

Neo-security Stack

Alfresco: Implementing secure single sign on (SSO) with OpenSAML

CIS13: Mobile Single Sign-On: Extending SSO Out to the Client

Single Sign On - Case Study

SINGLE SIGN-ON

SSO - SIngle Sign On

SSO introduction

Oauth2.0

AWS Directory Service and Hybrid Strategy | AWS Public Sector Summit 2016

OAuth 2.0

Single sign on

Federation in Practice

Nordic APIs - Building a Secure API

OAuth and OpenID Connect for Microservices

Similar to Mobile SSO using NAPPS

Unlocking the Power of Mobility - Ben Goodman

scoopnewsgroup

Open-RnD Mobile Offer

Open-RnD

Srand022 bluetooth based attendance management system

Androidproject

Ramesh iOS Profile

Ramesh Sarpuru

Consigue una App 5 estrellas

Globe Testing

Presentación Marcos Grilanda /Amazon Web Services - eCommerce Day Santiago 2017

eCommerce Institute

Srand002 attendance management system

Androidproject

Microsoft released PowerApps to a selective audience as a private preview in November 2015. It’s a service for enterprises to connect data across clouds to create intelligent business apps faster than ever before and share them to any device. Besides addressing the business developer and power user, it also provides opportunities for developers. This enables enterprises to expose corporate internal sources to be used within PowerApps and unleash the power of PowerApps combined with internal data sources. This session goes into the details of the possibilities for developers to leverage the Azure App Services and build APIs to use within your PowerApps. Live demos cover building and managing the API which exposes the internal data within a PowerApp on your device.

PowerApps, the Developer Story: Build an API to Integrate Corporate Data

Bram de Jager

SplunkLive! São Paulo 2014 - Overview by markus zirn

Splunk

Smart Cities. Brad Coughlan. AWS

Helen Rogers

API Trends: What to expect in 2012

Apigee | Google Cloud

Mobile App Virtualization (MAV)

Michael P. Gagnon

In January, PwC’s The Global State of Information Security declared its top 8 goals for 2016. Among these it asserted CISOs need to focus on “Replacing passwords with advanced authentication.” With terms like advanced authentication being thrown into a mix that already includes adaptive, contextual, behavioral, risk-based, multifactor and dozens more, it’s easy to give up and let confusion reign over the authentication space. And the idea of replacing passwords altogether? Is that even possible? In this on demand webinar, iovation’s Michael Thelander will clarify the authentication landscape and make sense of a rapidly evolving field that brings together the needs of both information security and fraud prevention teams. You’ll learn: * What analysts like PwC mean by “advanced security,” and what it might provide * Some ways password-less authentication might be achieved at scale * How different technologies might be combined to bring to the nirvana state of “continuous authentication”

Authentifusion: Clarifying the Future of User Authentication

Kelly Colbert

Authentifusion: Clarifying the Future of User Authentication

TransUnion

IRJET- Displaying Data of Smart Phone using Firebase

IRJET Journal

IoT and big data have made their way out of industrial applications, general automation, and consumer goods, and are now a valuable tool for improving consumer engagement across a number of industries, including media, entertainment, and sports. The low cost and ease of implementation of AWS analytics services and AWS IoT have allowed AGT, a leader in IoT, to develop their IoTA analytics platform. Using IoTA, AGT brought a tailored solution to EuroLeague Basketball for real-time content production and fan engagement during the 2017-18 season. In this session, we take a deep dive into how this solution is architected for secure, scalable, and highly performant data collection from athletes, coaches, and fans. We also talk about how the data is transformed into insights and integrated into a content generation pipeline. Lastly, we demonstrate how this solution can be easily adapted for other industries and applications.

ABD218_How Euroleague Basketball Uses IoT Analytics to Engage Fans- ABD218

Amazon Web Services

Moving beyond conventional single sign-on to seamless cross-device access with APIs People are carrying more devices every day – with the average being 2.9 per person. Meanwhile, multitasking has gone into overdrive, as users quickly move from laptop to phone to tablet, expecting a seamless experience when accessing their favorite apps. And this expectation is not just limited to leisure and personal use – it extends to business applications. Security has broken this seamless workflow and inhibited the mobile “stickiness” businesses are striving to achieve. This webinar with Scott Morrison and Leif Bildoy of CA Technologies will demonstrate how the right combination of identity functionality and secure APIs can help your organization to overcome these challenges and enable the multi-device universe. You Will Learn • What challenges must be overcome when supporting multiple mobile app types • How SSO is evolving past mobile app access to device access • Why the right implementation of identity and APIs will create consumer stickiness • How the Internet of Things (IoT) is creating new business opportunities

Enabling the Multi-Device Universe

CA API Management

Big Data and Internet of Things:Creating Customer Value for the Internet of ...

Red Bend Software

Why Progressive Web Apps will transform your website

Jason Grigsby

IRJET - Prototype Android based Real Time Crop Information Collection System

IRJET Journal

Similar to Mobile SSO using NAPPS (20)

Unlocking the Power of Mobility - Ben Goodman

Open-RnD Mobile Offer

Srand022 bluetooth based attendance management system

Ramesh iOS Profile

Consigue una App 5 estrellas

Presentación Marcos Grilanda /Amazon Web Services - eCommerce Day Santiago 2017

Srand002 attendance management system

PowerApps, the Developer Story: Build an API to Integrate Corporate Data

SplunkLive! São Paulo 2014 - Overview by markus zirn

Smart Cities. Brad Coughlan. AWS

API Trends: What to expect in 2012

Mobile App Virtualization (MAV)

Authentifusion: Clarifying the Future of User Authentication

IRJET- Displaying Data of Smart Phone using Firebase

ABD218_How Euroleague Basketball Uses IoT Analytics to Engage Fans- ABD218

Enabling the Multi-Device Universe

Big Data and Internet of Things:Creating Customer Value for the Internet of ...

Why Progressive Web Apps will transform your website

IRJET - Prototype Android based Real Time Crop Information Collection System

Recently uploaded

ICT role in 21st century education and its challenges

rafiqahmad00786416

Angeliki Cooney has spent over twenty years at the forefront of the life sciences industry, working out of Wynantskill, NY. She is highly regarded for her dedication to advancing the development and accessibility of innovative treatments for chronic diseases, rare disorders, and cancer. Her professional journey has centered on strategic consulting for biopharmaceutical companies, facilitating digital transformation, enhancing omnichannel engagement, and refining strategic commercial practices. Angeliki's innovative contributions include pioneering several software-as-a-service (SaaS) products for the life sciences sector, earning her three patents. As the Senior Vice President of Life Sciences at Avenga, Angeliki orchestrated the firm's strategic entry into the U.S. market. Avenga, a renowned digital engineering and consulting firm, partners with significant entities in the pharmaceutical and biotechnology fields. Her leadership was instrumental in expanding Avenga's client base and establishing its presence in the competitive U.S. market.

Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...

Angeliki Cooney

In this keynote, Asanka Abeysinghe, CTO,WSO2 will explore the shift towards platformless technology ecosystems and their importance in driving digital adaptability and innovation. We will discuss strategies for leveraging decentralized architectures and integrating diverse technologies, with a focus on building resilient, flexible, and future-ready IT infrastructures. We will also highlight WSO2's roadmap, emphasizing our commitment to supporting this transformative journey with our evolving product suite.

Platformless Horizons for Digital Adaptability

WSO2

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Juan lago vázquez

Dubai, known for its towering skyscrapers, luxurious lifestyle, and relentless pursuit of innovation, often finds itself in the global spotlight. However, amidst the glitz and glamour, the emirate faces its own set of challenges, including the occasional threat of flooding. In recent years, Dubai has experienced sporadic but significant floods, disrupting normalcy and posing unique challenges to its infrastructure. Among the critical nodes in this bustling metropolis is the Dubai International Airport, a vital hub connecting the world. This article delves into the intersection of Dubai flood events and the resilience demonstrated by the Dubai International Airport in the face of such challenges.

Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf

Orbitshub

Vector Search -An Introduction in Oracle Database 23ai.pptx

Remote DBA Services

Keynote 2: APIs in 2030: The Risk of Technological Sleepwalk Paolo Malinverno, Growth Advisor - The Business of Technology Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...

apidays

Following the popularity of "Cloud Revolution: Exploring the New Wave of Serverless Spatial Data," we're thrilled to announce this much-anticipated encore webinar. In this sequel, we'll dive deeper into the Cloud-Native realm by uncovering practical applications and FME support for these new formats, including COGs, COPC, FlatGeoBuf, GeoParquet, STAC, and ZARR. Building on the foundation laid by industry leaders Michelle Roby of Radiant Earth and Chris Holmes of Planet in the first webinar, this second part offers an in-depth look at the real-world application and behind-the-scenes dynamics of these cutting-edge formats. We will spotlight specific use-cases and workflows, showcasing their efficiency and relevance in practical scenarios. Discover the vast possibilities each format holds, highlighted through detailed discussions and demonstrations. Our expert speakers will dissect the key aspects and provide critical takeaways for effective use, ensuring attendees leave with a thorough understanding of how to apply these formats in their own projects. Elevate your understanding of how FME supports these cutting-edge technologies, enhancing your ability to manage, share, and analyze spatial data. Whether you're building on knowledge from our initial session or are new to the serverless spatial data landscape, this webinar is your gateway to mastering cloud-native formats in your workflows.

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Safe Software

Passkeys: Developing APIs to enable passwordless authentication Cody Salas, Sr Developer Advocate | Solutions Architect - Yubico Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...

apidays

Webinar Recording: https://www.panagenda.com/webinars/why-teams-call-analytics-is-critical-to-your-entire-business Nothing is as frustrating and noticeable as being in an important call and being unable to see or hear the other person. Not surprising then, that issues with Teams calls are among the most common problems users call their helpdesk for. Having in depth insight into everything relevant going on at the user’s device, local network, ISP and Microsoft itself during the call is crucial for good Microsoft Teams Call quality support. To ensure a quick and adequate solution and to ensure your users get the most out of their Microsoft 365. But did you know that ‘bad calls’ are also an excellent indicator of other problems arising? Precisely because it is so noticeable!? Like the canary in the mine, bad calls can be early indicators of problems. Problems that might otherwise not have been noticed for a while but can have a big impact on productivity and satisfaction. Join this session by Christoph Adler to learn how true Microsoft Teams call quality analytics helped other organizations troubleshoot bad calls and identify and fix problems that impacted Teams calls or the use of Microsoft365 in general. See what it can do to keep your users happy and productive! In this session we will cover - Why CQD data alone is not enough to troubleshoot call problems - The importance of attributing call problems to the right call participant - What call quality analytics can do to help you quickly find, fix-, and prevent problems - Why having retrospective detailed insights matters - Real life examples of how others have used Microsoft Teams call quality monitoring to problem shoot problems with their ISP, network, device health and more.

Why Teams call analytics are critical to your entire business

panagenda

How to Troubleshoot Apps for the Modern Connected Worker

ThousandEyes

Artificial Intelligence Chap.5 : Uncertainty

Khushali Kathiriya

Sidekick Solutions uses Bonterra Impact Management (fka Social Solutions Apricot) and automation solutions to integrate data for business workflows. We believe integration and automation are essential to user experience and the promise of efficient work through technology. Automation is the critical ingredient to realizing that full vision. We develop integration products and services for Bonterra Case Management software to support the deployment of automations for a variety of use cases. This video focuses on the deployment of external web forms using Jotform for Bonterra Impact Management. This solution can be customized to your organization’s needs and deployed to support the common use cases below: - Intake and consent - Assessments - Surveys - Applications - Program registration Interested in deploying web form automations for Bonterra Impact Management? Contact us at sales@sidekicksolutionsllc.com to discuss next steps.

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...

Jeffrey Haguewood

Boost Fertility New Invention Ups Success Rates.pdf

sudhanshuwaghmare1

Exploring Multimodal Embeddings with Milvus

Zilliz

💉💊+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHABI}}+971581248768 +971581248768 Mtp-Kit (500MG) Prices » Dubai [(+971581248768**)] Abortion Pills For Sale In Dubai, UAE, Mifepristone and Misoprostol Tablets Available In Dubai, UAE CONTACT DR.Maya Whatsapp +971581248768 We Have Abortion Pills / Cytotec Tablets /Mifegest Kit Available in Dubai, Sharjah, Abudhabi, Ajman, Alain, Fujairah, Ras Al Khaimah, Umm Al Quwain, UAE, Buy cytotec in Dubai +971581248768''''Abortion Pills near me DUBAI | ABU DHABI|UAE. Price of Misoprostol, Cytotec” +971581248768' Dr.DEEM ''BUY ABORTION PILLS MIFEGEST KIT, MISOPROTONE, CYTOTEC PILLS IN DUBAI, ABU DHABI,UAE'' Contact me now via What's App…… abortion Pills Cytotec also available Oman Qatar Doha Saudi Arabia Bahrain Above all, Cytotec Abortion Pills are Available In Dubai / UAE, you will be very happy to do abortion in Dubai we are providing cytotec 200mg abortion pill in Dubai, UAE. Medication abortion offers an alternative to Surgical Abortion for women in the early weeks of pregnancy. We only offer abortion pills from 1 week-6 Months. We then advise you to use surgery if its beyond 6 months. Our Abu Dhabi, Ajman, Al Ain, Dubai, Fujairah, Ras Al Khaimah (RAK), Sharjah, Umm Al Quwain (UAQ) United Arab Emirates Abortion Clinic provides the safest and most advanced techniques for providing non-surgical, medical and surgical abortion methods for early through late second trimester, including the Abortion By Pill Procedure (RU 486, Mifeprex, Mifepristone, early options French Abortion Pill), Tamoxifen, Methotrexate and Cytotec (Misoprostol). The Abu Dhabi, United Arab Emirates Abortion Clinic performs Same Day Abortion Procedure using medications that are taken on the first day of the office visit and will cause the abortion to occur generally within 4 to 6 hours (as early as 30 minutes) for patients who are 3 to 12 weeks pregnant. When Mifepristone and Misoprostol are used, 50% of patients complete in 4 to 6 hours; 75% to 80% in 12 hours; and 90% in 24 hours. We use a regimen that allows for completion without the need for surgery 99% of the time. All advanced second trimester and late term pregnancies at our Tampa clinic (17 to 24 weeks or greater) can be completed within 24 hours or less 99% of the time without the need surgery. The procedure is completed with minimal to no complications. Our Women's Health Center located in Abu Dhabi, United Arab Emirates, uses the latest medications for medical abortions (RU-486, Mifeprex, Mifegyne, Mifepristone, early options French abortion pill), Methotrexate and Cytotec (Misoprostol). The safety standards of our Abu Dhabi, United Arab Emirates Abortion Doctors remain unparalleled. They consistently maintain the lowest complication rates throughout the nation. Our Physicians and staff are always available to answer questions and care for women in one of the most difficult times in their lives. The decision to have an abortion at the Abortion Cl

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...

?#DUbAI#??##{{(☎️+971_581248768%)**%*]'#abortion pills for sale in dubai@

Corporate and higher education. Two industries that, in the past, have had a clear divide with very little crossover. The difference in goals, learning styles and objectives paved the way for differing learning technologies platforms to evolve. Now, those stark lines are blurring as both sides are discovering they have content that’s relevant to the other. Join Tammy Rutherford as she walks through the pros and cons of corporate and higher ed collaborating. And the challenges of these different technology platforms working together for a brighter future.

Corporate and higher education May webinar.pptx

Rustici Software

Following the popularity of “Cloud Revolution: Exploring the New Wave of Serverless Spatial Data,” we’re thrilled to announce this much-anticipated encore webinar. In this sequel, we’ll dive deeper into the Cloud-Native realm by uncovering practical applications and FME support for these new formats, including COGs, COPC, FlatGeoBuf, GeoParquet, STAC, and ZARR. Building on the foundation laid by industry leaders Michelle Roby of Radiant Earth and Chris Holmes of Planet in the first webinar, this second part offers an in-depth look at the real-world application and behind-the-scenes dynamics of these cutting-edge formats. We will spotlight specific use-cases and workflows, showcasing their efficiency and relevance in practical scenarios. Discover the vast possibilities each format holds, highlighted through detailed discussions and demonstrations. Our expert speakers will dissect the key aspects and provide critical takeaways for effective use, ensuring attendees leave with a thorough understanding of how to apply these formats in their own projects. Elevate your understanding of how FME supports these cutting-edge technologies, enhancing your ability to manage, share, and analyze spatial data. Whether you’re building on knowledge from our initial session or are new to the serverless spatial data landscape, this webinar is your gateway to mastering cloud-native formats in your workflows.

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Safe Software

Discover the innovative features and strategic vision that keep WSO2 an industry leader. Explore the exciting 2024 roadmap of WSO2 API management, showcasing innovations, unified APIM/APK control plane, natural language API interaction, and cloud native agility. Discover how open source solutions, microservices architecture, and cloud native technologies unlock seamless API management in today's dynamic landscapes. Leave with a clear blueprint to revolutionize your API journey and achieve industry success!

WSO2's API Vision: Unifying Control, Empowering Developers

WSO2

Tracing the root cause of a performance issue requires a lot of patience, experience, and focus. It’s so hard that we sometimes attempt to guess by trying out tentative fixes, but that usually results in frustration, messy code, and a considerable waste of time and money. This talk explains how to correctly zoom in on a performance bottleneck using three levels of profiling: distributed tracing, metrics, and method profiling. After we learn to read the JVM profiler output as a flame graph, we explore a series of bottlenecks typical for backend systems, like connection/thread pool starvation, invisible aspects, blocking code, hot CPU methods, lock contention, and Virtual Thread pinning, and we learn to trace them even if they occur in library code you are not familiar with. Attend this talk and prepare for the performance issues that will eventually hit any successful system. About authorWith two decades of experience, Victor is a Java Champion working as a trainer for top companies in Europe. Five thousands developers in 120 companies attended his workshops, so he gets to debate every week the challenges that various projects struggle with. In return, Victor summarizes key points from these workshops in conference talks and online meetups for the European Software Crafters, the world’s largest developer community around architecture, refactoring, and testing. Discover how Victor can help you on victorrentea.ro : company training catalog, consultancy and YouTube playlists.

Finding Java's Hidden Performance Traps @ DevoxxUK 2024

Victor Rentea

Recently uploaded (20)

ICT role in 21st century education and its challenges

Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...

Platformless Horizons for Digital Adaptability

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf

Vector Search -An Introduction in Oracle Database 23ai.pptx

Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...

Why Teams call analytics are critical to your entire business

How to Troubleshoot Apps for the Modern Connected Worker

Artificial Intelligence Chap.5 : Uncertainty

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...

Boost Fertility New Invention Ups Success Rates.pdf

Exploring Multimodal Embeddings with Milvus

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...

Corporate and higher education May webinar.pptx

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

WSO2's API Vision: Unifying Control, Empowering Developers

Finding Java's Hidden Performance Traps @ DevoxxUK 2024

Mobile SSO using NAPPS

2. Why is this important ? 0 300 600 900 2009 2010 2011 2012 Smartphones and tablets PC shipments of information workers use three or more devices for w o r k t o i n c r e a s e p r o d u c t i v i t y EXPLOSIVE GROWTH in shipments of smartphones and tablets Sources: IDC, BGR, Forrester FLAT pc shipments New Device Platforms New Apps New User ExpectationsNew Device Platforms BYOD & JIT

3. The Changing Device Mix 148 141 202 240 128 352 722 1516 0 1000 2000 2012 2017 Smartphone Tablet Portable PC Desktop PC Source: IDC's Worldwide Smart Connected Device Tracker Forecast Data, February 28, 2013 Connected Device Market by Product Category, Shipments, 2012-2017 in Millions

4. The Changing Device Mix Source: IDC's Worldwide Smart Connected Device Tracker Forecast Data, September 11, 2013 By 2017, 87% of connected devices will be smart phones and tablets

5. App 1

6. App 1 App 2 App 3

7. App 1 App 2 App 3 App 4

8. App 1 App 2 App 3 AD

9. App 1 App 3 AD Policy Server App 2

10. App 1 AD Policy Server App 2 App 3 App 1 AD Policy Server App 2 App 3

11. App 1 AD Policy Server App 2 App 3 App 1 AD Policy Server App 2 App 3

12. App 1 AD SAML IdP App 2 App 3 App 1 AD App 2 App 3 Policy Server SAML RP Policy Server SAML

13. App 1 AD SAML IdP App 2 App 3 App 1 AD App 2 App 3 Policy Server SAML RP Policy Server SAML

14. App 1 AD SAML IdP App 2 App 3 App 1 AD App 2 App 3 Policy Server SAML RP Policy Server SAML

15. App 1 AD SAML IdP App 2 App 1 AD App 2 App 3 Policy Server SAML RP Policy Server SAML App 3SAML RP

16. App 1 AD SAML IdP App 2 App 1 AD App 2 App 3 Policy Server SAML RP Policy Server SAML iOS App App 3SAML RP

17. App 1 AD SAML IdP App 2 App 1 AD App 2 App 3 Policy Server SAML RP Policy Server SAML iOS App App 3SAML RP

18. App 1 AD SAML IdP App 2 App 1 AD App 2 App 3 Policy Server SAML RP Policy Server SAML OAuth AS iOS App App 3SAML RP

19. App 1 AD SAML IdP App 2 App 1 AD App 2 App 3 Policy Server SAML RP Policy Server SAML iOS AppiOS App OAuth ASApp 3SAML RP

20. App 1 AD SAML IdP App 2 App 1 AD App 2 App 3 Policy Server SAML RP Policy Server SAML iOS AppiOS App OAuth ASApp 3SAML RP

21. App 1 AD SAML IdP App 2 App 1 AD App 2 App 3 Policy Server SAML RP Policy Server SAML iOS AppiOS App OAuth AS OAuth ASApp 3SAML RP

22. App 1 AD SAML IdP App 2 App 1 AD App 2 App 3 Policy Server SAML RP Policy Server SAML iOS AppiOS App OAuth AS OpenID Connect OpenID Connect OAuth ASApp 3SAML RP

23. App 1 AD SAML IdP App 2 App 1 AD App 2 App 3 Policy Server SAML RP Policy Server SAML iOS AppiOS App OAuth AS OpenID Connect OpenID Connect OAuth ASApp 3SAML RP TA

24. Web SSO Flow 1 2 3 4 SAML IdP RP AD

25. Mobile App Auth Flow 1 2 4 3 SAML IdP RP / RS AD Mobile App AS 5 6 7 OAuth

26. Mobile App Mobile App(s) Auth Flow 1 2 4 3 SAML IdP RP / RS AD Mobile App AS 5 6 7 OAuth

27. Mobile App Auth Flow

28. IdP Discovery

29. IdP Discovery

30. IdP Login

31. Access to App

32. Mobile App Auth Flow

33. IdP Discovery

34. IdP Discovery

35. IdP Login

36. App Access

37. App Access

38. Mobile App Mobile App(s) Auth Flow 1 2 4 3 SAML IdP RP / RS AD Mobile App AS 5 6 7 OAuth Issues  Authentication per Mobile App.  No invalidation of access token  No clean up of offline/cached data on device

39. Mobile App SSO – SP Init

40. Mobile App SSO – IdP Init

41. Mobile App SSO

42. Mobile App SSO

43. Where are we today ? • Layer 7 • Centrify • Samsung Knox • Google Auth

44. App 1 App 3 AD Policy Server App 2

45. Deployment Models • Enterprise in-house native apps • Native App for a SaaS provider • Multiple native apps for a single SaaS provider

46. NAPPS • OIDF working group • Profile of OpenIDConnect • Participants include (VMware, AirWatch, Ping Identity, Mobile Iron, Okta, OneLogin…)

47. NAPPS Terminology • Token Agent: Native app that obtains access tokens on behalf of other native apps • AppInfo Endpoint: Endpoint to obtain metadata about apps • Primary Token: OAuth token obtained by TA for its own use • Secondary Token: OAuth token obtained by TA on behalf of other native app

48. Mobile App SSO 1 23 SAML IdP RP / RS AD Mobile App AS 5 9 OAuth Token Agent 3 PT 6 ST 4 5 7 8

49. Mobile App SSO

50. Thank You!

Mobile SSO using NAPPS

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Viewers also liked

Viewers also liked (20)

Similar to Mobile SSO using NAPPS

Similar to Mobile SSO using NAPPS (20)

More from Ashish Jain

More from Ashish Jain (14)

Recently uploaded

Recently uploaded (20)

Mobile SSO using NAPPS