Open Identity Stack

2

Identity Products Today Stack vendors built by acquisition

The integrated stack is marketecture

Installation takes days

Integration is complex

Interface and UI proliferation

No module reuse

Closed source

Vendor lock in

3

ForgeRock Vision Simple

Scalable

Modular

Embeddable

Common REST framework

Common UI model

Community participation

4

Common Modules CREST (ForgeRock REST)

User Interface

JASPI for Authentication

REST endpoint protection (filters)

OAuth

Federation

Logging

Entitlements

5

OpenAM

All in one

Simple war deployment

Platform independent Flexible and extensible

Highly available and scalable

6

OpenAM

ForgeRock REST (Commons REST)

Protected Resources

WebAgents

JavaEEAgents

Web ServicesAgents

User Interface

End User Management

ForgeRock UI Framework

Core Services

Authentication Entitlements Session AuditngOAuth

Core Token Service OpenID Connect

Configuration

PolicyUser

ManagementSecure Token

ServiceXACML Federation

SPIs

Authentication Plugins

Policy Plugins

User MgmtPlugins

Token ServicePlugins

Federation Plugins

Persistence (OpenDJ)

Universal Gateway

7

OpenAM

ForgeRock REST (Commons REST)

Protected Resources

WebAgents

JavaEEAgents

Web ServicesAgents

User Interface

End User

ForgeRock UI Framework

Core Services

Authentication Entitlements Session AuditOAuth

Core Token Service OpenID Connect

Configuration

PolicyUser

ManagementSecure Token

ServiceXACML Federation

SPIs

Authentication Plugins

Policy Plugins

User MgmtPlugins

Token ServicePlugins

Federation Plugins

Persistence (OpenDJ)

Universal Gateway

Management

8

OpenAM Persistence

OpenAM Server

Polices

Users

Configuration

Tokens

Core Services

OpenDJ

OpenAM Server

Polices

Users

Configuration

Tokens

Core Services

OpenDJ

9

OpenAM Persistence

OpenDJ

OpenAM Server

Polices

Users

Configuration

Tokens

Core Services

OpenAM Server

Polices

Users

Configuration

Tokens

Core Services

OpenDJ

10

OpenIDM Lightweight provisioning

Next generation modular architecture

Built on resource oriented principles

Highly extensible

Self contained

11

OpenIDM OSGI

Persistence (OrientDB)

ForgeRock UI Framework

ForgeRock REST Router

Business Logic (Javascript, Groovy, Java)

Authentication Filter (JASPI)

Jetty Web Server

ConfigurationManaged

Users Sync/ReconSystem

(Connectors)

Scheduler WorkflowAudit/Logs

Policy

Ext

ern

al R

eso

urc

es

Audit

12

OpenIDM Commons OSGI

Persistence (OrientDB)

ForgeRock UI Framework

ForgeRock REST Router

Business Logic (Javascript, Groovy, Java)

Authentication Filter (JASPI)

Jetty Web Server

ConfigurationManaged

Users Sync/ReconSystem

(Connectors)

Scheduler Task ScannerAudit/Logs

Policy

Ext

ern

al R

eso

urc

es

Audit

13

Identity Bridge Software appliance

■ Wizard configuration

Identity synchronization from enterprise to SaaS

Reporting and reconciliation

SAML2 and OAuth

14

Identity Bridge OSGIConfiguration Wizard

OpenIDM

Business Logic (Javascript, Groovy, Java)

Authentication JASPI (AD and IWA)

Jetty Web Server

Salesforce and LDAP

OAuth

Sa

lesf

orc

eL

DA

P

Co

nne

cto

r

Federation

ForgeRock UI Framework

Reporting and Recon

15

OpenDJ Lightweight

Embeddable

REST APIs

High availability

Secure out of the box

Flexible architecture

16

OpenDJUser Interface

End User Management

ForgeRock UI Framework

ForgeRock REST

Core Server

Replication AuditingLDAPV3 Caching Monitoring

Password Policy

GroupsSchema

ManagementREST2LDAPAccess Control

Backend Services

Persistence Connectors LDIF MemoryChange Log

Java SDK/ LDAPv3

Web Application

REST2LDAP

ForgeRock REST

17

OpenDJ CommonsUser Interface

End User Management

ForgeRock UI Framework

ForgeRock REST

Core Server

Replication AuditngLDAPV3 Caching Monitoring

Password Policy

GroupSchema

ManagementREST2LDAPAccess Control

Backend Services

Persistence Connector LDIF MemoryChange Log

Java SDK/ LDAPv3

Web Application

REST2LDAP

ForgeRock REST

18

OpenDJ REST2LDAPUser Interface

Login/End User

ForgeRock UI Framework

OpenDJ Server

REST2LDAP

Core Services

ForgeRock REST

JASPI Authentication Module

19

Single Webapp Stack

OpenAMAuthenticationAuthorizationFederation

OpenIDMUser Management

SyncronizationWorkflow

OpenDJ Persistence

Users/Tokens/Configuration

ForgeRock REST

ForgeRock UI Framework

Login/Registration/Self Service

20

High Scale Elastic Stack

OpenAM

ForgeRock REST

ForgeRock UI Framework

Login/Registration/Self Service

ForgeRock REST

OpenDJ Distributor OpenDJ Distributor

OpenAM

ForgeRock REST

ForgeRock UI Framework

Login/Registration/Self Service

ForgeRock REST

OpenAM

ForgeRock REST

ForgeRock UI Framework

Login/Registration/Self Service

ForgeRock REST

OpenAM

ForgeRock REST

ForgeRock UI Framework

Login/Registration/Self Service

ForgeRock REST

OpenDJ OpenDJ OpenDJ OpenDJ OpenDJ OpenDJ OpenDJ

OpenIDM OpenIDM OpenIDM OpenIDM