WSO2 Identity Server - the presentation done at the first round of NBQSA 2011

1. Prabath Siriwardena
Software Architect & Senior Manager[Carbon Platform & Security]
NBQSA
~
2011
~
18th/Aug/2011

2. An
open
source
Identity
&
Entitlement
management
server
NBQSA
~
2011

3. Authentication
An
open
source
Identity
&
Entitlement
management
server
LDAP AD JDBC
NBQSA
~
2011

4. Authentication
NBQSA
~
2011

5. Authentication
Single Sign On
An
open
source
Identity
&
Entitlement
management
server
SAML2 Kerberos
NBQSA
~
2011

6. Single
Sign
On
NBQSA
~
2011

7. Provisioning
Authentication
Single Sign On
An
open
source
Identity
&
Entitlement
management
server
SPML SCIM
NBQSA
~
2011

8. Provisioning
NBQSA
~
2011

9. Provisioning
Authentication
Single Sign On
An
open
source
Identity
&
Entitlement
management
server
Auditing
XDAS
NBQSA
~
2011

10. Auditing
NBQSA
~
2011

11. Provisioning
Authentication
Single Sign On
An
open
source
Identity
&
Entitlement
management
server
Auditing Delegation
WS-TRUST
NBQSA
~
2011

12. Delegation
NBQSA
~
2011

13. Provisioning
Authentication
Single Sign On
An
open
source
Identity
&
Entitlement
management
server
Federation
Auditing Delegation
SAML2 WS-TRUST
NBQSA
~
2011

14. Federation
NBQSA
~
2011

15. Role Based Access Control
An
open
source
Identity
&
Entitlement
management
server
NBQSA
~
2011

16. Attribute Based Access Control
Role Based Access Control
An
open
source
Identity
&
Entitlement
management
server
NBQSA
~
2011

17. Attribute Based Access Control
Role Based Access Control
An
open
source
Identity
&
Entitlement
management
server
Policy Based Access Control
XACML
NBQSA
~
2011

18. Attribute Based Access Control
Role Based Access Control
An
open
source
Identity
&
Entitlement
management
server
SOAP
Policy Based Access Control
XACML / WS-XACML
NBQSA
~
2011

19. Attribute Based Access Control
Role Based Access Control
REST
An
open
source
Identity
&
Entitlement
management
server
SOAP
Policy Based Access Control
XACML
NBQSA
~
2011

20. An
open
source
Identity
&
Entitlement
management
server
Web based management console
NBQSA
~
2011

21. An
open
source
Identity
&
Entitlement
management
server
SOAP based API
Web based management console
NBQSA
~
2011

22. ¡ User
stores
with
LDAP/AD/JDBC
¡ OpenID
¡
SAML2
¡
Kerberos
¡
Information
Cards
¡
XACML
¡
OAuth
¡
Security
Token
Service
with
WS-­‐Trust
NBQSA
~
2011

23. ¡ SCIM
¡ XDAS
¡
WS-­‐XACML
NBQSA
~
2011

24. NBQSA
~
2011

25. ¡ Open
source
&
open
standards
¡ Lean
¡ No
vendor
lock-­‐in
¡ All
in
a
single
product
¡ Interoperability
¡ Extensibility
¡ The
power
of
WSO2
SOA
stack
¡ Short
learning
curve
NBQSA
~
2011

26. ¡ Decentralized
Single
Sign
On
¡ Single
user
profile
¡ Widely
used
for
community
&
collaboration
aspects
¡ Multifactor
Authentication
[Infocard,
XMPP]
¡ OpenID
relying
party
components
NBQSA
~
2011

27. ¡ Single
Sign
On
/
Single
Logout
¡ Widely
used
*aaS
providers
[Google
Apps,
Salesforce]
¡
SAML2
Web
SSO
Profile
¡ Used
in
WSO2
StratosLive
NBQSA
~
2011

28. ¡ Key
Distribution
Center
[KDC]
NBQSA
~
2011

29. ¡ The
de-­‐facto
standard
for
authorization
¡ Support
for
multiple
PIPs
¡ Policy
distribution
¡ Decision
/
Attribute
caching
¡ UI
wizard
for
defining
policies
¡ Notifications
on
policy
updates
¡ TryIt
tool
NBQSA
~
2011

30. EntitlementService
EntitlementPolicyAdminService
SOAP
SOAP
Attribute Finder Policy Decision Point
Extensions Decision Policy
Extensions Administration
Cache
Attribute Point
Cache XACML
Engine
Default
Finder
Policy Cache
LDAP
NBQSA
~
2011

31. NBQSA
~
2011

32. NBQSA
~
2011

33. NBQSA
~
2011

34. ¡
Identity
Delegation
¡ Securing
RESTful
services
¡
2-­‐legged
&
3-­‐legged
OAuth
¡
XACML
integration
with
OAuth
¡ OAuth
2.0
support
in
progress
NBQSA
~
2011

35. Consumer
App
Registers
consumer
key/secret
Obtains
request
token
Obtains
authorized
request
token
NBQSA
~
2011

36. Consumer
App
Obtains
access
token
access
token
Validates
Resource
NBQSA
~
2011

37. ¡ Supports
WS-­‐Trust
1.3/1.4
¡ SAML
1.0/1.1/2.0
token
profiles
¡
Claim
management
NBQSA
~
2011

38. Resource
Security Token
Service
Consumer
App
Domain
A
Domain
B
NBQSA
~
2011

39. ¡ Pluggable
authenticators
¡ XACML
attribute
finders
and
designators
¡ SAML
attribute
finders
for
STS
¡ Clustering
support
for
HA
NBQSA
~
2011

40. ¡ Entitlement
Mediator
for
XACML
¡ OAuth
Mediator
¡ SAML2
Identity
Provider
NBQSA
~
2011

41. European
Identity
Awards
2011
~
under
Cloud
Offerings
for
XACML
and
OpenID
implementations
NBQSA
~
2011

42. ¡ Open
and
agile
¡ Apache
Software
License
¡ Source
code
repository
(Subversion)
§ https://svn.wso2.org/repos/wso2
¡ Issue
tracker
(JIRA)
§ http://wso2.org/jira
¡ Continuous
integration
¡ Public
mailing
lists
NBQSA
~
2011

43. ¡ Downloadable
documentation
distribution
¡ On-­‐line
documentation
§ http://wso2.org/project/solutions/identity/3.2.0/docs/
§ Articles,
webinars
and
tutorials
on
WSO2
Oxygen
Tank
http://wso2.org/library/security
§ Blogs
http://blog.facilelogin.com
http://blog.thilinamb.com
http://pathberiya.blogspot.com
http://hasini-­‐gunasinghe.blogspot.com
NBQSA
~
2011

44. ¡ Webinars
§ Six
identity
&
security
webinars
-­‐
2011
¡ Work
shops
§ WSO2
Security
Workshop
–
March
2011
(NY,
DC,
TX)
§
WSO2
Security
Workshop
-­‐
May
2011
(London,
Paris,
Frankfurt,
Zurich)
§ WSO2
Security
Workshop
–
June
2011
(Palo
Alt0
–
US)
§ WSO2
Cloud
Security
Workshop
–
Aug
2011
(Palo
Alt0
–
US)
NBQSA
~
2011

45. ¡ Articles
and
white
papers
¡ Conferences
§ WSO2Con
§ OSCON
§ QCON
§ ApacheCon
NBQSA
~
2011

46. ¡ W3C
¡ OASIS
¡ OpenID
Foundation
¡ Infocard
Foundation
¡ Microsoft’s
Interop
Vendor
Alliance
NBQSA
~
2011

47. NBQSA
~
2011