Hackference India 2018 | Modern Identity

Modern identity is a lot more than just the login screen. In this talk, the audience learned about the different concepts that make up a modern identity.

Google slides: https://bit.ly/2UNyyag
Link of conference: https://hackference.in/about
Repo: https://github.com/rowdymehul/Hackference-India-2018

Transcript

1. By Mehul Patel, @rowdymehul Modern Identity Inspired by : @KukicAdo
2. Mehul Patel Engineer at Zimbra Mentor at Mozilla Reps Auth0 Ambassador, Auth0 Inc Rust Mobilizer Co-founder of IDF Twitter : @rowdymehul way2mehul@gmail.com About Me
3. • Exposing Sensitive Data • Broken Authentication • Security Misconfiguration • Injection Vulnerability Common Web Security Vulnerabilities
4. What is Identity ?
5. What is Identity ? Authentication of an individual
6. What is Modern Identity ? • Authentication - The way you login • Authorization - Right access to Right People at Right Time • Security - Protecting data in motion and at rest • Personalization - Tailored user experience
7. Authentication ➔ Traditional Username and Password ➔ Social login via Facebook,Twitter, Google , etc. ➔ Enterprise Federation and Single Sign On ➔ Passwordless
8. Traditional Username and Password • Most Common • Easy to Implement • Least Secure
9. Social Login • Common • Medium Difficulty • More secure
10. Single Sign On • Most Common in Enterprise • Difficult to Implement • Solve Authorization use cases
11. Passwordless • Rare / Upcoming • Easy to Implement • Very secure
12. Authorization ➔ Ensure the user has the right access at the right time ➔ Grant, Change and Revoke access
13. Security Biggest concern for our valuable data
14. Password • Complexity • Storage • Security
15. Multi Factor Authentication • Something you know, Something you have , Something you are Brute Force Protection • Prevent repeated failed login attempts • Alert user and validate identity Anomaly Detection • Proactively protect users • Alert user of suspicious activity • Breached password detection
16. Personalization ➔ Give a personal touch to each user ➔ Make Data work for you ➔ Enhanced Analytics
17. Auth0 Identity as a Service • Modern Identity in 10 minutes • Free Tier ( 7000 Monthly Active users ) • Team of Security Expert
18. Visit auth0.com
24. Explore... auth0.com/docs
25. Questions ? Available on GitHub, Telegram & Twitter : @rowdymehul