1. Bring
Your
Own
Iden/ty
(BYOID)
Prabath
Siriwardena
(@prabath)
Director
of
Security
WSO2

4. Gartner
predicts,
by
the
end
of
2015,
50%
of
all
new
retail
customer
iden<<es
will
be
based
on
social
network
iden<<es.

5. Facebook
is
only
second
to
China
and
India
in
terms
of
its
user
base.

6. Facebook
vs.
Internet
User
vs.
World
Popula<on

7. Facebook
vs.
China
vs.
India

8. Enterprise
Iden<ty
ßà
Social
Iden<ty

9. IT
consumeriza<on
is
an
emerging
topic
or
trend
for
last
few
years.

10. The
ini<al
consumeriza<on
hype
was
focused
on
the
bring
your
own
device
(BYOD)
trend.

11. Bring
Your
Own
Device
(BYOD)
à
Bring
Your
Own
Iden<ty
(BYOID)

12. The
rise
of
BYOID
is
being
driven
by
users'
"iden<ty
fa<gue”.

13. The
analyst
firm
Quocirca
confirms
that
in
Europe
58
percent
transact
directly
with
users
from
other
businesses
and/or
consumers;
for
the
UK
alone
the
figure
is
65
percent.

14. In
U.S
only,
mergers
and
acquisi<ons
volume
totaled
to
$865.1
billion
in
the
first
nine
months
of
2013,
according
to
Dealogic.

15. What
drives
BYOID?

16. SAML
2.0
/
OpenID
/
OAuth
2.0
/
OpenID
Connect

17. SAML
1.0
à
Nov
2002
|
SAML
1.1
à
Sept
2003
|
SAML
2.0
à
2005

18. OpenID
was
ini<ated
by
the
founder
of
LiveJournal,
Brad
Fitzpatrick.

19. By
the
end
of
2009
–
there
were
more
than
one
billion
OpenID
accounts.

20. OpenID
started
to
fade
due
to
OAuth
2.0
and
OpenID
Connect.

21. OpenID
Connect
is
a
profile
built
on
top
OAuth
2.0.

22. OAuth
is
not
about
authen<ca<on
–
but,
delegated
authoriza<on.

23. The
standard
based
iden<ty
federa<on
is
the
entry
point
to
BYOID.

24. Internet
Iden<ty
always
-­‐
has
an
unsolved
problem

25. SAML
2.0
dominated
Iden<ty
Federa<on
in
last
decade
–
OpenID
Connect
and
JWT
possibly
lead
the
next.

26. Any
iden<ty
management
system
to
qualify
to
support
BYOID
-­‐
should
simply
go
beyond
standard
support
for
Iden<ty
Federa<on
protocols.

27. How
would
you
mediate,
transform
iden<ty
tokens
between
different
standards
or
protocols
?

28. WSO2
Iden<ty
Server
is
an
open
source
Iden<ty
and
En<tlement
management
server,
which
supports
SAML
2.0,
OpenID,
OAuth
2.0,
OpenID
Connect,
XACML
3.0,
SCIM,
WS-­‐Federa<on
(passive)
and
many
other
iden<ty
federa<on
palerns.

29. Operators
Service
Providers

30. Operators
Service
Providers
SAML
2.0
OpenID
Connect
/
SAML
2.0
OpenID
Connect
OpenID
Connect

31. SAML
2.0
OpenID
Connect
/
SAML
2.0

32. SAML
2.0
SAML
2.0
SAML
2.0
SAML
2.0

33. Operators
Service
Providers

34. 1
Scenario - 1
http://ebuy.federationdemo.com:9766/ebuy/

35. 2
OpenID
Connect
Request
Scenario - 1
1502808989

36. 3
OpenID
Connect
Request
Scenario - 1

37. 4
<
creden?als
>
Scenario - 1
User
:
tom_imobile
Password:
tom_imobile

38. 4
Scenario - 1

39. 5
OpenID
Connect
Response
Scenario - 1

40. 6
OpenID
Connect
Response
Scenario - 1

41. 7
Scenario - 1

42. 1
Scenario - 2
http://azone.federationdemo.com:9766/azone/
9477808989

43. 2
OpenID
Connect
Request
Scenario - 2

44. 3
SAML2.0
Request
Scenario - 2

45. 3
OAuth
2.0
Scenario - 2

46. 4
<
creden?als
>
Scenario - 2

47. 4
OAuth
2.0
response
Scenario - 2

48. 5
SAML2
Response
Scenario - 2

49. 6
OpenID
Connect
Response
Scenario - 2

50. 7
Scenario - 2

51. Thank
You..!!!