Instant Security & Scalable User Management with Spring Boot

In this talk, Les Hazlewood, Stormpath CTO and Apache Shiro Chair, goes beyond the traditional way to secure applications and takes a deep dive into how Spring Security + Stormpath gives you an instant, highly-available and highly-secure user management system for Spring Boot applications.

Sign up for Stormpath: https://api.stormpath.com/register
More from Stormpath: https://stormpath.com/blog

Transcript

1. @lhazlewood | @goStormpath Instant Security & Scalable User Management with Spring Boot Les Hazlewood @lhazlewood Apache Shiro Project Chair CTO, Stormpath stormpath.com
2. @lhazlewood | @goStormpath Spring Security • Authentication • Authorization • Enforcement • No user management
3. @lhazlewood | @goStormpath You’re on the hook for: • Data store integration • Data modeling • HTML pages • CSRF view support • Email verification • Forgot password • Oauth2 / Social setup • SAML coordination • Crypto choices • Multi-factor auth • Scale / growth • SaaS Multi-Tenancy • Mobile auth strategy • Microservice auth • Best practices • ...etc...
4. @lhazlewood | @goStormpath Traditional Application Your Application Users
5. @lhazlewood | @goStormpath What about new stores? Users LDAP/AD Your Application
6. @lhazlewood | @goStormpath And legacy migration? Legacy Users LDAP/AD New Users Your Application
7. @lhazlewood | @goStormpath And Social? Legacy Users LDAP/AD Google Apps Facebook GitHub New Users Your Application
8. @lhazlewood | @goStormpath And SSO/SAML? Legacy Users LDAP/AD Google Apps Facebook GitHub New Users Your Application Ping Okta Azure ADFS Oracle SSO SiteMinder LinkedIn OneLogin
9. @lhazlewood | @goStormpath And Multi-Tenant / SaaS ? Legacy Users LDAP/AD Google Apps Facebook GitHub New Users Your Application Ping Okta Azure ADFS Oracle SSO SiteMinder LinkedIn OneLogin Customer A Customer C Customer F Customer B Customer D Customer E Customer G
10. @lhazlewood | @goStormpath Oh the Hue Manatee!
11. @lhazlewood | @goStormpath Stormpath takes you from this... Legacy Users LDAP/AD Google Apps Facebook GitHub New Users Your Application Ping Okta Azure ADFS Oracle SSO SiteMinder LinkedIn OneLogin Customer A Customer C Customer F Customer B Customer D Customer E Customer G
12. @lhazlewood | @goStormpath To this... Your Application
13. @lhazlewood | @goStormpath To this... Your Application Your Application Your Application Your Application ...
14. @lhazlewood | @goStormpath But much more than a backend • Application SDKs • Framework Integrations • Best practices
15. @lhazlewood | @goStormpath Live Demo Time!
16. @lhazlewood | @goStormpath Pages & Workflows
17. @lhazlewood | @goStormpath SSO & Social
18. @lhazlewood | @goStormpath OAuth & Mobile
19. @lhazlewood | @goStormpath Flexible Authorization
20. @lhazlewood | @goStormpath Application Servlet Filters How does it work? Spring Security Stormpath MVC Stormpath SDK ...
21. @lhazlewood | @goStormpath Stormpath works hard for you • Java SDK 1.0.0 released last Tuesday! • SDK + Integration Effort: ~ 8 man years • Extreme customizability • Automatic defaults • Often no code required
22. @lhazlewood | @goStormpath Thank You! • les@stormpath.com • Twitter: @lhazlewood • https://stormpath.com