Centralized identity management is dead. Passwords should be dead. The identity assumptions of the first 50 years of computing are no longer meeting the needs of the 21st Century. We need to use Open Standards and Open security models to federate identity and access control - not just across organizations but across different technologies, different standards and different models. The concept of an Identity Bus is a reference architecture for solving these problems and creating a strategically federated approach to identity, and creating approaches that support borderless identity.

1. Borderless Identity
“The Enterprise Identity Bus”
Paul Fremantle
CTO and Co-Founder, WSO2
paul@wso2.com @pzfreo #wso2

2. • CTO and Co-Founder, WSO2
• Chair of OASIS standard
• Apache Committer
• Regular speaker
• PhD student
o In a band: Revel Weird and
Wild
o Plays flute and mandolin
o Father of two children
o Keen snowboarder

4. Connected Business

5. Connected Car
Credits: https://angel.co/carvoyant

6. Connected Car of the Year 2013 – Mercedes Benz S Class
• Connected Car is reconnecting car makers to their customers
• Creating new ecosystems of App Providers
• Creating new Big Data
• And creating new challenges around Identity and Access
Management

7. Connected Plane
(Connected Supply Chain)

8. Connected Government

9. Connected Everything

10. Offer and
Manage APIs
to the rest of
the world

11. Understanding a Connected Business

12. https://www.flickr.com/photos/1stpix_diecast_dioramas/

14. Borders don’t work any more

15. Why?
• BYOD / BYO Everything
• APIs
• IoT
• Ecosystems
• Mergers / Acquisitions
• Value Webs

16. SAML
SAML
SAML
SAML
Spaghetti Identity
SAML
SAML
SAML
SAML
SAML
SAML
SAML

17. The history of integration in Enterprises
• Single EAI hub
• Departmental ESBs
• The cross-ESB ESB
• APIs and true federation

18. https://www.flickr.com/photos/jaredzimmerman

19. https://www.flickr.com/photos/cobalt

20. Federated Identity Silos
SAML
SAML
SAML
OIDC
OIDC
OIDC
OpenID
OpenID
OpenID

21. Connected! – But Yet Disconnected
SAML
SAML
SAML
OIDC
OIDC
OIDC
OpenID
OpenID
OpenID

22. What is the lesson?
A single monolithic identity model just won’t work

23. GSMA Mobile Connect

24. OpenID Connect Discovery
Registry model of integration

25. The Enterprise Identity Bus

26. What does an Enterprise Identity Bus do?
• Bridges between
Tokens – OAuth/2, OpenID/OIDC, SAML2, WS-Federation,
Kerberos, etc
Claims and Claims Dialects – email addresses, phone numbers,
names, etc
Provisioning
SPML, SCIM, Salesforce, Google, etc
Just in Time provisioning, inbound, outbound

27. Who is building a connected
business?

28. • The only company to build a complete platform for a
Connected Business in a single codebase
– Including the Enterprise Identity Bus
• The only company to have the same platform deploy on-
premise, in private cloud, and in a public cloud
• 100% open source

29. WSO2 Identity Server 5.0
Launching May 21st 2014

30. Invention comes in many
forms and at many scales.
The most radical and
transformative of inventions
are often those that empower
others to unleash their
creativity – to pursue their
dreams.
Jeff Bezos

32. Thank you
paul@wso2.com
http://wso2.com/contact
http://pzf.fremantle.org
@pzfreo
#wso2