1. Enterprise
Iden,ty
Management
&
Security
Pa7erns
and
Prac,ces
Prabath
Siriwardena

23. Email

24. JIRA

25. SVN

26. Forrester
Iden2ty
Management
Maturity
Model

27. Iden2ty
as
a
Service

28. Single
Sign
On

29. Provisioning

30. Delega2on

31. Federa2on

32. Access
Control

33. Audi2ng

34. Principles
of
Iden2ty
Data
Do
NOT
replicate
iden22es

35. Principles
of
Iden2ty
Data
Business
requirements
should
drive
iden2ty
replica2on

36. Principles
of
Iden2ty
Data
Replicated
iden22es
should
be
read-­‐only

37. Principles
of
Iden2ty
Data
Iden2ty
data
should
be
loca2on
transparent

38. Principles
of
Iden2ty
Data
Enforce
the
consistency
&
integrity
of
iden2ty
data
with
policies,
processes
&
tools

39. Principles
of
Iden2ty
Data
Use
open
standards
rather
than
proprietary
standards

40. Principles
of
Iden2ty
Data
Use
encryp2on
to
protect
sensi2ve
iden2ty
elements

41. WSO2
Iden2ty
Server
• User
stores
with
LDAP/AD/JDBC
• Mul2ple
user
store
support
• OpenID
• SAML2
• Kerberos
• Informa2on
Cards
• XACML
2.0
/
3.0
• OAuth
1.0
/
2.0
• Security
Token
Service
with
WS-­‐Trust
• SCIM
1.1
• WS-­‐XACML

42. Thank
you