As the world is recovering from the pandemic, the education industry is among the top industries undergoing large-scale digital transformation. Providing enhanced online learning options, ensuring seamless digital experiences, and adhering to security and privacy regulations are some key challenges facing education institutions. Ellucian Ethos Identity, powered by WSO2, is a customer identity and access management (CIAM) platform that enables educational institutions to achieve their digital goals. Asgardeo is a CIAM-as-a-service offering that is an alternative for organizations who are looking to offload hosting and maintenance to another provider while also being able to bridge identities with Ellucian Ethos Identity.
Breaking the Kubernetes Kill Chain: Host Path Mount
Modernizing the Student Journey with Ethos Identity
1. Modernizing the Student Journey with
Ethos Identity
March, 2022
johann@wso2.com
Head of Solutions Architecture - IAM
Johann Dilantha Nallathamby
2. 2
Global Presence
Colombo, Dubai, Mumbai, Munich, New
York, London, Santa Clara, São Paulo,
Sydney
1000 Employees
45% Engineering
800+ Customers
Across 90 countries and 6 continents
Founded in 2005
Backed by Cisco, Goldman Sachs and Toba
Capital
Rapidly Growing
31% YoY Growth in ARR
WSO2 in a Nutshell
Open Source
Easy Adoption, Interoperability, Community
3. Asgardeo
An IDaaS to create seamless login
experiences to your apps in minutes.
Choreo
Reduce complexity. Build cloud-native, digital
products and solutions with agility and at scale.
3
WSO2 Products
Together, with hundreds of the world’s largest corporations, leading universities, and governments, we execute in excess
of 6 trillion transactions, expose more than 500,000 APIs, and manage over 500 million identities every single year.
WSO2 API Manager (+ Enterprise Integrator)
One complete platform for building, integrating, and
exposing your digital services as managed APIs.
WSO2 Identity Server
Federates and manages identities across both
cloud service and enterprise environments.
WSO2 Open Banking
A purpose-built technology platform for
global open banking.
WSO2 Open Healthcare
Towards greater interoperability with a proven
integration platform and FHIR®.
Strategic
Consulting
Streamline your
business objectives and
rapidly achieve key
results.
Professional
Services
Knowledge sharing, internal
talent enablement, and
strategic skills
augmentation.
Training &
Certification
Train your development team on
WSO2 product usage,
administration, and architecture.
4. 4
Industry Recognition
An Overall Leader in KuppingerCole’s Leadership
Compass: CIAM Platforms, 2020
A Strong Performer in the Forrester WaveTM:
Customer Identity and Access Management, Q4 2020
6. 6
IAM Challenges in Education
1. Diverse user base
2. Multiple affiliations
3. User-friendly services
4. Increased security requirements
5. Compliance
6. Digitalisation
7. Organizational pain-points
7
● Zero-trust security
● Regulatory compliance
● Protect against security vulnerabilities
● Minimize administration overhead
IT Security
Reporting to CISOs,
CTOs, CDOs, etc…
● Gaining a competitive advantage
● Providing personalized customer experiences
● Rapid go-to-market
Marketing/LOBs
Reporting to CMOs,
CROs, CFOs, CPOs, etc…
8. Organizational pain-points
8
● Delivering both, a great Customer Experience AND strong Customer
Security
● Shortening development/implementation cycles
● Shortage of Identity-specialized developers
● Successfully Achieving ‘Customer/Citizen-scale’
● Keeping-up with fast changing business needs
● A cost effective solution - irrespective of scale
Enterprise
Architects
Reporting to CTOs, IT
Directors, etc…
9. “The current commercially available CIAM technologies fail
to address the most sophisticated requirements for user
experience (UX), compliance, privacy and fraud detection.”
“CIAM offerings need to be more developer-friendly and
include capabilities that further empower developers as a
way to continuously adapt to new customer and business
needs.”
- Gartner on CIAM - 2018 -
10. “Every company is a software company.
You have to start thinking and operating like a digital
company. It’s no longer just about procuring one
solution and deploying one. It’s not about one simple
software solution. It’s really you yourself thinking of
your own future as a digital company.”
- Satya Nadella, Microsoft - 2019 -
11. We recognize that organizations are on a
CIAM journey. CIAM developers are the
most important participant in this journey.
We want to be known as the #1 developer
focussed CIAM solution.
12. Progressing toward CIAM 2.0
A CIAM maturity model
None
Managed
Identities
Siloed
00 01 02
Connected
03 04
Optimized
Basic identity management
Registration, social login, access to customer portal
01
Simple integration with siloed business systems
Customer information replicated within apps
02
Unified customer view, shared among multiple apps
Consistent user experience
03
Omnichannel user experience
Real-time customer analytics
Optimized business
04
Level
00
Customers are strangers
Interactions are anonymous
Basic CIAM 1.0 use cases are
minimum CX entry points
CIAM 2.0: Secure, API-level integration with
business systems enables advanced CX solutions
Reference: https://wso2.com/blogs/thesource/a-maturity-model-for-customer-iam/ 12
13. CIAM 2.0 - A reference architecture
UNIVERSITY
SYSTEMS
13
14. (DPaaS/cloud)
14
14
WSO2 Offerings for CIAM 2.0
WSO2 Identity Platform
WSO2 Integration Platform
(on-prem) (IDaaS/cloud) (cloud)
WSO2 Identity
Server
Beta
Early Adopter
WSO2 Private
Identity Cloud
Q2 2022
Hybrid
H2 2022
Agents
Tomcat / Nginx /
Apache
SDKs
JS / React / React
native / Angular
/Java / C# / Go
IDE plugins
VS Code
Marketplace
Duo Security/ RSA
SecurID/ Aware/
OPA/ Evident
(on-prem)
WSO2 API
Manager
(cloud)
Q2 2022
WSO2 Private API
Integration Cloud
15. Platform capabilities
15
Single-sign-on and
federation
API security
Policy-based fine-grained
access control
Identity bridging Self-service
Business system
integrations
Extensible product
architecture
Strong and adaptive
authentication
Privacy and consent
management
Regulatory compliance
User onboarding and
Lifecycle management
Identity analytics, reporting
and dashboarding
Identity proofing /
UEBA integrations
16. Security vs.
Convenience
Maintain appropriate security controls
without alienating users with high-
friction CX.
● Risk-based adaptive authentication workflow
● Multifactor, federated, social, passwordless
authentication and more
Unique Value
Realization
Realize unique, compelling CX vision
without complicated development
projects.
● Best end-to-end developer experience
● Extensive set of tools, docs, samples & resources
● Collaborative community
Deployment
Flexibility
Deployment choices to fit organizations’
unique and evolving needs.
● SaaS, public/private/hybrid cloud, or Private ID
Cloud managed service
● Supports real-world needs, including data
residency and single tenancy
Scaling and
Economics
World-class CIAM capabilities at any
scale.
Affordable even at consumer/citizen
scale.
● Predictable pricing, even at high scale
● SaaS option offers competitive entry-level pricing
that remains economical with growth
CIAM without Compromise
16
17. Telco
Over 500 Million user identities managed across 275+ direct customers globally and 1000+ additional deployments
through OEM partners
17
Who’s using the WSO2 CIAM Platform today?
Financials Healthcare Government Automotive Leisure
Retail Technology Education
50+ Educational Institutes across the Globe
18. 18
● Public funded university open to students of all beliefs and teaches
within the Catholic intellectual tradition. Established in 1991
following the amalgamation of four institutions with origins in the
mid-1800s. It consists of 7 campuses across 3 states. Their
newest campus was opened in Rome in 2015. Ranked 501 – 600 in
the Times Higher Education (THE) World University Rankings.
● Built an online student portal that enable single sign-on to all their
resources via computers or mobile devices. The solution aimed at
creating superior, collaborative experiences for students and staff,
alike, is a key differentiator for ACU.
WSO2 products are easy to use, lightweight,
scalable, and are very cost-effective.
Vijesh Makanji, Application delivery manager at ACU
Australia
WSO2 Products Enterprise Integrator | Identity Server
We are enabling foundation blocks for digital and innovation capabilities.
The platform is one of the critical components in the IT ecosystem.
Niranjan Prabhu, ACU Chief Information Officer and Director of Information Technology
34000
Students
34% Mobile
High uptake in few months
2500
Staff
6 Mins
Average Session Duration
19. Makes students’ day-to-day university life easy
Single
Sign-On
Consolidated
View of
Everything
TimeTable
MyLibrary
News
Student Info
LEO
(Online Learning)
OrgSync
(Online Community)
Student Connect
(Student Information)
Tutorial
(Educational Content)
Allocate Plus
(Timetables)
Enables access to multiple systems with a single login
Student
Staff
ACU Students Portal
Mobile App with a diverse
suite of interactive features
Business Architecture
19
20. MS Azure
Sitecore
Campus Managed
Ellucian Ethos
AWS
Integration Platform
Active Directory
Identity Service
Student Connect
LEO
(Managed by
Androgogic)
Tutorial
Direct
External Systems
Source Systems
OrgSync
(Managed by
third party)
Students
Students
Portal
Solution Architecture
20
21. Forrester Consulting found that “Identity Server
enabled these organizations to consolidate their
customer identity and access management
capabilities while keeping costs consistent
despite growth, save developer time, and
accelerate offerings to market --- all while
fostering a frictionless customer experience.”
Forrester Consulting interviewed 4 WSO2 Identity
Server customers for this study, and for the
purpose of the study, the 4 organizations were
aggregated into 1 composite organization.
21
WSO2 Identity Server
Total Economic Impact
$4.51M
Total benefits over 3 years
332%
ROI over 3 years
12 weeks
Faster time to market
60%
Increase in developer productivity
22. 22
Ellucian Ethos Identity - Extended Support Program
● Access to CIAM domain expertise
● Support for all features of WSO2
Identity Server, including
integrations outside the set of
Ellucian and Non Ellucian
products.
● Supports either Ellucian Ethos
Identity distributions or WSO2
Identity Server distributions or
both.
● Optional consulting services to
help with training, development,
operations, migration, and more
WSO2 started in 2005 as an opensource company
In the last 16 year we gained an abundance of experience solving integration and identity problems for enterprises across the world and some of them are leading names in the market.
Today we are over 65M in revenue with 700+ customers and counting
We have over 900 employees across the world spread across 6 continents
Goal
Show some market analysis.
We are on the wave of Forrester leaders when it comes to API Management surpassing our competition such as Mulesoft, Redhat, Tyk, IBM
And we are an overall leader in KupperingerCole’s Leadership Compass!
Highlight:
It is interesting to emphasize that we are in the same groups of companies as IBM and Google and that when we talk about project values, we are much better positioned.
Organizations are on a CIAM journey
Multi-channel engagement
Omni-channel experience
Integrations with customer solutions such as CRM, DMP, marketing automation, Risk engines, etc.
Constantly evolving security and regulatory requirements
Rapid onboarding of applications and client organizations
There is no COTS product that can solve all your unique business requirements. Any solution should be extensible to meet future demands. APIs can help here.
CIAM solutions need to be more developer friendly
API-led integration
Organization branding
Cloud-first and flexible deployment options including hybrid deployments
IAM Architects are looking for CIAM solutions that are mature in what they do at the same time open for extension to meet future business requirements.
A highly flexible, API-driven, standards-based cloud-service and runtime.
Leveraging the unified view of their consumers for personalized customer experiences
Marketing promotions
Cross-sell/up-sell opportunities
Delivering a seamless omni-channel user experience
For the Integration story - Biz System int + API Security
Vertical solutions - supports Regulatory compliance, etc..
Goal
Show some of the main customers in the most varied verticals that we serve in these 15 years.
It is important to emphasize the great logos that rely on our solutions.
https://wso2.com/about/news/australian-catholic-university-enhances-student-experience-using-an-integrated-student-portal-powered-by-wso2-software/
https://wso2.com/library/conference/get-on-the-bus-for-the-journey/
https://wso2.com/casestudies/australian-catholic-university-enhances-student-experience-and-improves-productivity-using-open-source-wso2-platform/
Student feedback:
“Very clear and self-explanatory”
“Love the linking of the schedules and centralization of unit information for the academic year ahead”
“Pretty straight forward. Thumbs up.”