Lessons Learned From Federations In Denmark

Transcript

1. Lessons Learned From Federations In Denmark Martin Strandbygaard 21st May 2014
2. ? How Many Use Federation
3. ? How Many Use It Regularly
4. Who Am I
5. “Martin Strandbygaard”
8. martin@strandbygaard.com martin@strandbygaard.net martin.strandbygaard@safewhere.net
9. Something I Claim Something I Say All Part Of My Identity
12. What Others Say About Me This Is Also Part Of My Identity
13. (What Others Say = More Trusted)
14. How Do I Prove It?
15. = “Martin Strandbygaard, Safewhere”
16. = “Martin Strandbygaard”
17. I control it.
    I choose when to use it.
18. (Asymmetric trust = Scalability)
19. -
20. ... Proves Your A Database Entry
21. Doesn’t Say Anything About You
23. Federation Gives You A Digital Passport
24. “Proves You Are You”
25. Who already use it?
26. > 3,5 billion
27. Come again?
28. That’s every other one of us!
29. Where’d Some Of Them Come From? >800 million >1.2 billion >600 million >255 million
30. What’s It Good For?
31. “When your favourite tool is a hammer, everything is a nail. Federation is our hammer.”
32. ✓ “Fixing Usernames and Passwords”
33. We all know this ...
35. ✓ “Fixing Usernames and Passwords” ✓ “Someone else took my username”
36. “martin” is already taken. What about “martin325”?
37. ✓ “Fixing Usernames and Passwords” ✓ “Identities scattered all over the place” ✓ “Someone else took my username”
38. !=
39. ✓ “Fixing Usernames and Passwords” ✓ “Identities scattered all over the place” ✓ “Someone else took my username” ✓ “Password Reset In A Better Way”
40. “Favourite colour when you were 10”? (You remember, right? It’s only been 30 years)
41. ✓ “Fixing Usernames and Passwords” Improved security =
42. ✓ “Fixing Usernames and Passwords” ✓ “Letting Others In”
44. ✓ “Letting Others In” Greater Flexibility =
45. ✓ “Fixing Usernames and Passwords” ✓ “Letting Others In” ✓ “Making Things Simpler”
48. Federation
49. ✓ “Making Things Simpler” Reduced Complexity =
50. Things we do differently Customize Anything And Everything! Control of login method based on application or parts of application! ! Support for login from many different login providers! - Facebook, Twitter, OpenID, LiveId, username/password, two-factor, ”two-factor” from m devices etc.! - You can combine two different login methods for delivering multi-factor login! ! Extensibility built-in! - Multitenant architecture for implementing X federation servers! - Highly customizable login pages (including framework for mobile devices)! - You can ‘roll’ your own login providers and claims transformations as you see fit! - Built-in directory service for added flexibility!
51. ? Any Questions