Upgrade to Pro — share decks privately, control downloads, hide ads and more …

No-Code SAML Support with Stormpath

Stormpath
January 21, 2016

No-Code SAML Support with Stormpath

In this presentation, Stormpath Product Lead, Tom Abbott, will introduce Stormpath’s new support for the SAML Service Provider workflow. This release allows developers to add any SAML IdP to their customer login, including Salesforce, Okta, One Login and many more.

Stormpath SAML support gives your customers a seamless single sign-on experience, enhances user profiles with Stormpath Identity functionality, and enables SAML in your applications without custom code!

Read more about Stormpath's SAML Support: https://stormpath.com/blog/SAML-SP/
Sign up for Stormpath: https://api.stormpath.com/register

Topics Covered:
What's new in the Stormpath Identity API
An overview of Stormpath's new SAML support
SAML Support for Multi-tenant SaaS applications
SAML and ID Site - prebuilt workflows and screens to speed your development time
Quickstart Demo - enable SAML in your application without code
Technical Q&A

Stormpath

January 21, 2016
Tweet

More Decks by Stormpath

Other Decks in Programming

Transcript

  1. Welcome! • Agenda • Stormpath 101 (5 minutes) • SAML

    Support (25 minutes) • Technical Q&A (30 minutes) • Claire Hunsaker VP of Marketing & Customer Success • Tom Abbot Lead Product Manager
  2. Speed to Market & Cost Reduction • Complete Identity solution

    out-of-the-box • Security best practices and updates by default • Clean & elegant API/SDKs • Little to code, no maintenance
  3. Stormpath User Management User Data User Workflows Google ID Your

    Applications Application SDK Application SDK Application SDK ID Integrations Facebook Active Directory SAML
  4. What Is SAML? • Security Assertion Markup Language • Widely-adopted

    standard for authentication and authorization • Used by SaaS applications to integrate with enterprise SSO solutions
  5. SAML Terminology • Identity Provider (IdP) = Enterprise Identity- as-a-Service

    provider (Okta, OneLogin, Salesforce) • Service Provider = your application (and Stormpath as an element of your application) • User agent = the end-user of the application
  6. Enterprise Login with SAML • Quick and easy SAML support

    for your applications • Allow your customers to log in with their SSO system of choice • Support multiple IdPs per customer organization • Configuration-based attribute mapping
  7. Multi-Tenancy across Organizations and Identity Providers User Store Application Logic

    Single Instance of Your SaaS Application Single, shared stack of software Organization 1 Using Okta Organization 2 Using Salesforce Organization 3 Using Custom SAML With Stormpath You Don’t Have to Choose Between Full SSO Support and Multi-Tenancy
  8. Login Workflow with SAML Identity Provider- Initiated Flows User Identity

    Provider Service Provider User Identity Provider Service Provider Service Provider- Initiated Flows Stormpath supports a seamless SSO experience—end user’s point of entry can be the IdP or the service provider
  9. Configuration-Based Attribute Mapping IdP 1 firstName=Zeus IdP 2 fn=Zeus SAML

    Service Provider givenName=Zeus Stormpath lets you quickly and easily maps variables from diverse identity providers to variables within your application
  10. Configuration-Based Attribute Mapping Stormpath lets you quickly and easily maps

    variables from diverse identity providers to variables within your application
  11. Supported Platforms • Java •Rest API • Node.JS - github

    • .NET - github • PHP - github • Python - github • Ruby - github Java Node.js REST