1. Identity in the Cloud

2. Prabath Siriwardena
Security Architect & Product Manager(Identity Server), WSO2
Apache Axis2/Rampart committer
6 years industry experience

3. Founded in 2005 by acknowledged
leaders in XML, Web Services
Technologies & Standards and Open Source
Producing entire middleware platform 100%
open source under Apache license
Business model is to sell comprehensive
support & maintenance for our products
Venture funded by Intel Capital
Global corporation with offices in USA, UK
& Sri Lanka
80+ employees and growing

4. WSO2 SOA Platform

5. WSO2 Cloud Computing
• Cloud virtual machines: software virtual machines
– WSO2 products as Amazon EC2, VMWare & KVM images
• Cloud connectors: connecting the cloud to the enterprise
– Cloud Services Gateway
– Service Accelerator
• Cloud services: SOA software as a service
– Governance as a Service
– Identity as a Service
• Cloud middleware: building multi-tenant services & applications

6. Engagement Model
• Quick Start
– Combination of consulting, training and POC development in
one week by WSO2 on-site team working hand-in-hand with
your team
• Development Support
– On-going support for your engineering teams
• Production Support
– Full 24x7x365 enterprise support
– Regular service packs and updates to keep your system
secure and robust

9. IDENTITY goes hand in hand with TRUST

10. What makes my IDENTITY?

12. My AGE is part of my IDENTITY

13. My NAME is part of my IDENTITY

14. My PHONE NUMBER is part of my IDENTITY

15. My e-MAIL is part of my IDENTITY

16. My SSN is part of my IDENTITY

17. Who needs my IDENTITY?

18. My HR MANAGER

19. My FINANCE MANAGER

20. My PROJECT MANAGER

21. PARTNERS of my company

22. WHO Else ?

26. How do we share data related to
IDENTITY ???

27. Directory Services AD/LDAP

28. Directory Services AD/LDAP
IDENTITY attributes maintained in a central repo

29. Directory Services AD/LDAP
IDENTITY attributes shared across multiple
applications within the same domain

30. Directory Services AD/LDAP
Enterprise SSO can be established within
participating applications

31. Directory Services AD/LDAP
Directory awareness at the individual application
level

34. IDENTITY as a service

35. IDENTITY as a service
Integrates IDENTITY services into application
development

36. IDENTITY as a service
Decouples IDENTITY related logic from individual
application business logic

37. IDENTITY as a service
Decouples IDENTITY related logic from individual
application business logic

38. IDENTITY as a service
User, IDENTITY related data externalized from the
applications themselves

39. IDENTITY as a service
Adheres to SOA standards

40. IDENTITY SERVICES

41. IDENTITY PROVIDER
Externalize IDENTITY attributes

42. IDENTITY PROVIDER
Information Cards

43. IDENTITY PROVIDER
OpenID

44. IDENTITY PROVIDER
Identity Governance Framework [IGF]

45. Authentication
User name / password

46. Authentication
User centric identity : Information cards/OpenID

47. Authorization
Manages authorization logic

48. Authorization
XACML

49. Authorization - XACML
A general purpose authorization policy language

50. Provisioning
Supports administration of IDENTITY & ACCESS
Management

51. Provisioning
Provides centralized policy administration and
controls

52. Provisioning
SPML

53. Auditing
Audit all IDENTITY events

54. Auditing - XDAS
Distribute Audit Service

55. Auditing - XDAS
The principle of accountability

56. Auditing - XDAS
Detection of security policy violations

57. Identity Services

58. On-premise Identity Management

59. Moving to the cloud….

60. Powered By

62. Identit
y

63. Identit
y

64. OpenID
Identit
y

65. OpenID
Identit InfoCard
y

66. OpenID
Identit InfoCard
y
STS

67. OpenID
Identit InfoCard
y
STS
SAML2

68. OpenID
OpenID
Identit InfoCard
y
STS
SAML2

69. 1
WSO2 Cloud
Identity
Internal user tries to login to Liferay /
1
Drupal running on intranet

70. 1
2
WSO2 Cloud
Identity
OpenID relying party plug-in redirects the
2
user to WSO2 Cloud Identity OpenID provider
for authentication

71. 3
1
2
WSO2 Cloud
Identity
After authentication user redirected back to
3
Liferay / Drupal

72. SAML 2.0
OpenID
Identit InfoCard
y
STS
SAML2

74. Entitlement
XACML
OpenID
InfoCard
Entitlement
STS
SAML2

75. http://wso2.com
http://wso2.com/about/contact
bizdev@wso2.com
prabath@wso2.com
thilinab@wso2.com
Thank You…!!!