The wait is over! ForgeRock is releasing shiny new versions of all solution areas of the ForgeRock Identity Platform. To give you a preview on what’s coming, join this webinar to hear directly from the Product Managers what’s new in: Access Management Identity Management Directory Services Identity Gateway Shared Services Learn more about ForgeRock Access Management: https://www.forgerock.com/platform/access-management/ Learn more about ForgeRock Identity Management: https://www.forgerock.com/platform/identity-management/

1. Copyright © 2015 ForgeRock, all rights reserved. 1
ForgeRock Identity Platform
- A Sneak Preview -
Markus Weber
Senior Product Marketing Manager

2. Copyright © 2015 ForgeRock, all rights reserved. 2
Agenda
Topic Speaker
Intro and ForgeRock Overview
ForgeRock Identity Platform
Shared Services across the Platform
Identity Management
Directory Services
Access Management
Identity Gateway
Q & A
Markus Weber
Markus Weber
Markus Weber
Tim Sedlack
Ludovic Poitou
Andy Hall
Ludovic Poitou
All

3. Copyright © 2015 ForgeRock, all rights reserved. 3
 Founded: 2010
 Headquartered in San Francisco with
offices in 6 countries
 Employees: 350+
 Customers: 450+ in 30+ countries
 Global Reach: 50% international revenue
 Investors: Accel Partners, Foundation
Capital and Meritech Capital Partners
Key Facts Mission Statement
THE FORGEROCK IDENTITY
PLATFORM CURRENTLY POWERS
MORE THAN 500 MILLION
IDENTITIES. IT IS OUR GOAL TO
BECOME THE MARKET LEADER IN
DIGITAL TRANSFORMATION AND
SECURITY FOR ENTERPRISE
IDENTITY WORLDWIDE.
ForgeRock: At a Glance

4. Copyright © 2015 ForgeRock, all rights reserved. 4
Legacy World:
• Employee Scale
• Users Only
• “Doorway” Security
• Identity Fragments
• Static Relationships
• Months/Years
• Massive integration
• High TCO
ForgeRock World:
• IoT Scale
• Users, Things, Services
• Continuous Security
• Single View of Customer
• Contextual Relationships
• Weeks/ Months
• Pre-integrated
• Low TCO
The ForgeRock Difference

5. Copyright © 2015 ForgeRock, all rights reserved. 5
Shared Services : User Interface, Self-Service, REST API, HTTP, Scripting, Audit and Logging
Federation Synchronization
Authentication & Strong
Authentication
Identity Provisioning
Application & Service
Gateway
Authorization &
UMA Provider
Workflow Engine IoT Identity Gateway
Adaptive Risk Self-Service Password Capture & Replay
UMA Protector
Access Management Identity Management Identity Gateway
Data Store
High Availability
Data Segmentation
LDAP / REST
Directory Services
Open Standards, High Availability, On-Premises, Cloud, Hybrid
Single Integrated, Open Platform
ForgeRock Identity Platform

6. Copyright © 2015 ForgeRock, all rights reserved. 6
Shared Services : User Interface, Self-Service, REST API, HTTP, Scripting, Audit and Logging
Federation Synchronization
Authentication & Strong
Authentication
Identity Provisioning
Application & Service
Gateway
Authorization &
UMA Provider
Workflow Engine IoT Identity Gateway
Adaptive Risk Self-Service Password Capture & Replay
UMA Protector
Data Store
High Availability
Data Segmentation
LDAP / REST
Open Standards, High Availability, On-Premises, Cloud, Hybrid
Single Integrated, Open Platform
ForgeRock Identity Platform

7. Copyright © 2015 ForgeRock, all rights reserved.
Shared Services
Markus Weber
Senior Product Marketing Manager

8. Copyright © 2015 ForgeRock, all rights reserved. 8
Need For Common Services
Building an App is Complex
Core Application Services
REST APIs
Authentication
Logging Configuration
Business Logic
and Extensions
User Interface Mobile Apps
UI Framework Client SDK
DeveloperServices
HTTPServices
Database

9. Copyright © 2015 ForgeRock, all rights reserved. 9
ForgeRock Commons
Simplify, Standardize App Development
Core Application Services
Common REST (CREST)
Common AuthN Framework
Commons Audit Configuration
Common Scripting
User Interface Mobile Apps
ForgeRock UI Mobile SDK
APIDescriptor
OpenDJ
CommonHTTP
Framework

10. Copyright © 2015 ForgeRock, all rights reserved. 10
Commons Projects
 ForgeRock REST (CREST)
 HTTP Framework
 REST End-Point Protection (Auth Filters)
 Scripting
 API Descriptor
 Audit
 UI Framework
 Self-Service
Core Application Services
Common REST (CREST)
Common AuthN Framework
Commons Audit Configuration
Common Scripting
User Interface Mobile Apps
ForgeRock UI Mobile SDK
APIDescriptor
OpenDJ
CommonHTTP
Framework

11. Copyright © 2015 ForgeRock, all rights reserved.
Identity Management
Tim Sedlack,
Senior Product Manager,
OpenIDM

12. Copyright © 2015 ForgeRock, all rights reserved. 12
OpenIDM – Identity Management
 Seamlessly manage identities of users, devices and things across all
channels, on premises, in the cloud and on mobile
• Identity Provisioning
• User Self – Service
• Password Management
• Synchronization and Reconciliation
• Customizable workflow engine
• Connector framework
• REST based
• Lightweight and embeddable
• Pluggable / modular design
• Developer friendly – hooks/scripting
• High capacity / high scale
• Open Source
Simple, flexible, open source identity management to
handle the lifecycle of identity for users, devices and things

13. Copyright © 2015 ForgeRock, all rights reserved. 13
OpenIDM – Self Service and Password Mgmt
 Customizable Process and UI
 Pluggable processing chain – reCaptcha, email, KBA out of the box
 Workflow enabled throughout the process
 Bootstrap (commons) based UI for easy customization
 4 standard functions
 Registration
 Password Reset
 Forgotten User Name
 Profile Management

14. Copyright © 2015 ForgeRock, all rights reserved. 14
OpenIDM – Developer and DevOps friendly!
 Developer oriented
 REST first design
 APIs, Hooks, Script points, pluggable, modular
 Use what only what you need
 Preconfigured examples provided – more than 35 samples
 Configuration management the way you want it
 Self-contained configuration started with a –p option
 Manage over REST, file based, or through the Admin GUI

15. Copyright © 2015 ForgeRock, all rights reserved. 15
OpenIDM – Identity Standardization
 Collect data from various sources
 On-Prem: Databases, HR, Files, AD, etc
 Cloud: SAAS applications, IDPs, etc
 Centralize, normalize all identity data
 360 degree view of customers (or employees, or devices, or whatever)
 Single place to go (view) for all collected data
 Insert workflow into the process
 Automated email, point in time calculations, etc
 Request/approval framework
 Certification process

16. Copyright © 2015 ForgeRock, all rights reserved.
Directory Services
Ludovic Poitou,
Director France,
Product Manager,
OpenDJ

17. Copyright © 2015 ForgeRock, all rights reserved. 17
Database Backends
 New backend called “PDB”
 Local-backend moved to
similar structure, called “JE”
 Better disk efficiency
 Better performances
 Tuned for Oauth2 and
OpenID Connect services

18. Copyright © 2015 ForgeRock, all rights reserved. 18
Replication Improvements
 New Replication ChangeLog
 Less disk utilization
 Smarter cleanup
 High Availability and
Failover for “cn=changelog”

19. Copyright © 2015 ForgeRock, all rights reserved. 19
Several improvements
 Certificate Matching Rules & GSER
(Community Contribution)
 PKCS5S2 Password Storage
 New privilege to access cn=Changelog
 New audit capabilities
(across ForgeRock platform)

20. Copyright © 2015 ForgeRock, all rights reserved.
Access Management
Andy Hall,
Director of Product Management,
OpenAM

21. Copyright © 2015 ForgeRock, all rights reserved. 21
Smarter Security
Authentication
 ForgeRock Authenticator App and
Authentication Module
 iOS and Android
 Strong 2FA based on OATH standard
 Easy to setup using QR codes
 Integrated with Contextual
Authentication
 SAML Authentication Module
 Easy integration of federated identity into
authentication framework
 Contextual Authentication now applied to
federated identities

22. Copyright © 2015 ForgeRock, all rights reserved. 22
Smarter Security
Authorization
 Contextual Authorization
 Enhanced Policy Editor supporting
Scriptable Conditions
 Custom logic integrated into Policy
decisions
 Supports Javascript or Groovy
 REST-calls to external Policy
Information Points (PIP)
 New Resource Types
 Define arbitrary types and actions
 Fine-grained policy definitions
OpenAM Session
Contextual
Change
System
Detects
New
Location
System detects change
during session and
requests further
authentication

23. Copyright © 2015 ForgeRock, all rights reserved. 23
Privacy and Consent
User Managed Access
 Putting users in control of access to
their data
 Fully compliant UMA Authorization
Server
 REST APIs and User Resource Pages
 Supporting:
 Resource Set Registration
 Resource Sharing
 Resource Labeling
 Pending Requests
 Audit history

24. Copyright © 2015 ForgeRock, all rights reserved. 24
Scalability and Elasticity
Stateless Sessions
 New deployment option
 Per-Realm attribute
 JWT-based sessions
 Ideal for Elastic Cloud-based
deployments
 Massive horizontal scalability
ClusterSize
Demand
Internet
Elastic Load Balancer

25. Copyright © 2015 ForgeRock, all rights reserved.
Identity Gateway
Ludovic Poitou,
Director France,
Product Manager,
OpenIG

26. Copyright © 2015 ForgeRock, all rights reserved. 26
Identity Gateway
 Improved support for OpenID Connect
 Discovery
 Registration
 Centralized Authorization Policy
with OpenAM
 Simplified Password Replay

27. Copyright © 2015 ForgeRock, all rights reserved. 27
OpenIG as API Gateway
 Throttling
 Global
 Per protected API or Application
 Monitoring
 Status
 Throughput and Response Times statistics
 Auditing

28. Copyright © 2015 ForgeRock, all rights reserved. 28
Other Improvements
 Security
 Control of TLS protocols and
cipher suites
 Mobile Gateway
 Token exchange from
OAuth2 to SAMLv2
 Better scalability and performances
 Improved ease of configuration

29. Copyright © 2015 ForgeRock, all rights reserved. 29
Where in the World is ForgeRock?
RSA Conference
29 February – 4 March 2016
San Francisco, CA
Gartner IAM Summit
14 – 15 March 2016
London, UK Visit forgerock.com

30. Copyright © 2015 ForgeRock, all rights reserved. 30
Q & A