1. WSO2 Identity Server 4.0 Fall 2012

2. WSO2 Carbon Enterprise Middleware Platform 2

3. Re-shaping Identity Management Source: http://www.idevnews.com/stories/4275/WSO2-Debuts-Cloud- Identity-Management-Authentication

4. An increasingly hybrid environment with multiple identity providers and distributed Cloud services Social, mobile, and Cloud re-shapes Identity Management Cloud Identity providers Corporat e Identity Corporate Policies Social Media Sites Cloud Services Mobile Customers, partners Employees, contractors Provisioning Entitlement Decisions

5. Secure and efficient social media, mobile, and Cloud service interactions demand interoperable identity - Federation Delegation Architecture distribution Services Cloud Identity Management

6. What is new in WSO2 Identity Server 4.0 Identity Management for Social, Mobile, and Cloud service use cases Federated Single-Sign On and Entitlement Decentralized federated SAML2 IDP Federated XACML PDP Policy Based Access Control Delegation XACML 3.0 support Multiple decision profile, Obligation & advice Architecture distribution REST-based cloud user-provisioning standard Simple Cloud Identity Management (SCIM) 1.0 support Integration with Enterprise Infrastructure Read/Write Active Directory support Password Policies Identity and Entitlement Services WS-XACML support for communication between PEP and PDP Open Authorization OAuth 2.0 support with HTTPS-based tokens

7. Cloud Provisioning

8. EntitlementService EntitlementPolicyAdminService Policy Decision Point Policy Cache Decision Cache XACML Engine Extensions Policy Administration Point Attribute Finder Extensions Default Finder LDAP Attribute Cache SOAP XACML Reference Architecture

9. Attribute Based Access Control ??? Slide???

10. : Cloud API Use Case

11. STS Web Portal WS - Trust Back-End Services WS - Security GE Healthcare: ???

12. ESAT2 Authorization Gateway Policy Store PAP PeopleSoft Custom Authorization Handlers PDP PIP Authorization Requests Citigroup: ???

13. WSO2 Identity Server Roadmap Q2 2013 (tentative) -Ease of Use Enhanced XACML 3.0 Policy Editor -Entitlements SAML2 grant type for OAuth 2.0 -Audit OpenID, OAuth, SAML2 statistics view BAM agent for centralized auditing -Enterprise Infrastructure integration IIS agent for SSO and XACML based authorization could replace SiteMinder SiteMinder Authenticator - Liferay agent for authentication and XACML based authorization - Role based access delegation Q4 2013 (tentative) - OpenID Connect - XACML Auditor and Reporting - IdP initiated SAML2 SSO - LDAP interface - REST profile for XACML - Evaluate UMA for communication between OAuth Resource Server and the Authorization Server - Apache Module as a XACML PDP agent

14. Questions!