Managing Identities at Scale in the Cloud

Managing identities and authorisations is a core requirement for all apps. Modern applications are required to securely manage hundreds of thousands or millions of identities.

In this talk, you will learn how you can leverage fully managed, serverless services in the cloud to securely manage your user pools. During this talk, we will address common challenges of identity management and identity federation and show how cloud-based solutions can simplify and secure your applications.

Transcript

1. Identity Management at scale in the ☁ Sébastien Stormacq | @sebsto Technical Evangelist, AWS EMEA
2. Congrats ! Your app launched
4. userid firstname lastmail email password sebsto Sébastien Stormacq stormacq@amazon.com FA34BD7543E… natalia Natalia Arbelaez nata@email.com AA6FC2984AB…
5. From 50 to 50.000.000 users
6. http://blog.interactiveschools.com/blog/50-million-users-how-long-does-it-take-tech-to-reach-this-milestone
7. What possibly can go wrong ? +,
12. seb@me.com
15. Developers build features
16. Amazon Cognito Managing Identities at Scale in the cloud AWS credentials and access control Customizable, hosted UI, or SDK Managed user directory Sign in with existing identities (federation) OpenID Connect and OAuth 2.0 Based
17. Amazon Cognito – Use Cases Business to Business Enterprise Directory Enterprise Directory SAML IoT Scenarios AWS IoT Business to Consumer Business to Employee Enterprise Directory SAML
21. Identity Federation
22. Identity Federation The user pool manages the overhead of handling the tokens that are returned from social sign-in through Facebook, Google, and Amazon, and from OpenID Connect (OIDC) and SAML IdPs. 1 Amazon Cognito user pool Authenticate Federating IdP Redirect/ post back 2 3 CUP token Idp token
23. Access to Resources User pool authenticates users and returns standard tokens Amazon Cognito user pool (CUP) tokens are used to access your custom APIs Identity pool provides role-based AWS credentials to access AWS services 1 Amazon Cognito user pool Authenticate Federating IdP Redirect/ post back 2 Amazon DynamoDB Amazon S3 6 5 Amazon Cognito identity pool Get AWS credentials CUP token 4 API GW Access serverless backend Lambda CUP token 3 CUP token Idp token
24. GE Healthcare : Health Cloud Provide radiologists and other healthcare professionals with a single portal to access enterprise imaging applications to view, process, and easily share images and patient cases. Every day, healthcare data flows through millions of medical devices. Close to 1 petabyte of medical imaging data is stored on Amazon S3. “Using Amazon Cognito, our customers can continue to use their existing credentials and still access our health cloud apps.” Amazon S3 User Federation Amazon Cognito user pools
25. What are you going to change today? ✅ Managed Service in the cloud ✅ Build your own IDP ✅ Federate Identities ✅ Store PII Data
26. Thank you Sébastien Stormacq | @sebsto Technical Evangelist, AWS EMEA Leave your feedback