Oggi Matteo ci parla di WSO2 Identity Server Adaptive authentication Scaletta del talk: Introduzione: Chi è Profesia/WSO2 Cosa è un Identity server Ruolo di Identity server in architettura Panoramica feature Identity server Configurazione social Google Login con google e non con un esempio Considerazioni finali Relatore: Matteo Bordin, Principal Architect e WSO2 Certified in Profesia Srl Vuoi saperne di più? Scrivi a wso2.sales@profesia.it

4. WSO2 Identity Server è un prodotto IAM open source, estendibile,
ottimizzato per la federazione delle identità e SSO (single sign-on) con il
completo supporto all'autenticazione adattiva,multi-fattore e la
sicurezza delle API.
Semplifica la configurazione di un ecosistema federato di gestione delle
identità e garantisce un accesso sicuro ad applicazioni Web/mobile,
end-point in ambienti locali e cloud.
WSO2 Identity Server include tutte le sue estensioni con la licenza
commerciale Apache 2.0.

5. IAM capability
Identity Federation and
SSO
Identity Bridging
Strong and Adaptive
authentication
API and Microservice security
Access Control
Account Management and Identity
Provisioning
Privacy Regulation Compliance
Identity Analytics

6. Identity Federation and SSO
SSO
● Unique Login
● One Credential
● One Identity manager
Federation
● BYOID
● Social Login

7. Identity Bridging
Exchanging identity attributes and authentication decisions between
heterogeneous identity systems and protocols.
Exchanging:
● Token di accesso (OIDC, SAML2, WS-Federation ...)
● Claim
● User Provisioning (SCIM<-> SOAP, Google, Salesforce ...)

8. Strong and Adaptive
authentication
Adaptive authentication
● context attributes
● environmental attributes
● device type
● geolocalization

9. API and Microservice security
Protocols:
● OAuth2
● OIDC
Profile
● microprofile JWT 1.0
● role-based
Grant Type:
● SAML2
● JWT-Assertion
● NTLM-IWA

10. Access Control
Access Control
● fine-grained access control policies
● policy decision point for third-party
applications.
● user entitlements
● role-based access control.
● XACML
○ fine-grained policy-based access
control
○ user-friendly policy administration
(PAP)
○ REST profile support

11. Account Management and
Identity Provisioning
Features:
● Self-service interface for user
management
● InBound, OutBound Just-in-time (JIT)
provisioning
● User Association
● Multi userstore

12. Privacy Regulation Compliance
Features:
● GDPR
● Kantare consent management
○ Self Sign-up
○ SSO/Federation
● Self service portal
● Privacy Toolkit

13. Identity Analytics
Features:
● generate and analyzing
login attempts
● generate and analyzing
session
● monitor and prevent
fraudulent activity
● manually terminating user
session
● forcing password reset

14. Deployment pattern 1

15. Deployment pattern 2

16. DEMO
https://demo1.profesia.it:9453/oauth2/authorize?response_type=code
&client_id=zUM83Wqx5q_DK4VmSgqzZzUJ4ZYa
&scope=PRODUCTION
&redirect_uri=http://demo1.profesia.it/callback

17. Conclusioni
● WSO2 is the leader in open source IAM
● Capabilities for securing APIs and CIAM
● Identity federation
● SSO
● Strong and adaptive authentication
● Privacy compliance
● Single solution for common identity requirements
● Extensible
● Integrated in API management and Enterprise
Integrator

18. Q&A?

19. GRAZIE!!!
Prossimo appuntamento:

20. Contatti
DOVE SIAMO
Milano - Torino - Padova - Roma
TELEFONO
Torino +39-011-0120371
EMAIL
wso2.sales@profesia.it
@