Extending Identity and Access Management to ios Mobile Devices

Transcription

1 Extending Identity and Access Management to ios Mobile Devices Sudhir Tadi Senior Technology Sales Consultant EMEA Presales Center 1

2 The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle s products remains at the sole discretion of Oracle. 2

3 Agenda Introduction The Mobile Technician Scenario Solution Architecture Use Cases Demonstration Questions & Answers 3

4 Introduction 4

5 The Mobile Technician Scenario A day in the life of a mobile technician Has lots of applications on his phone created by some great ios developers: Uses a technical manuals application to do his job highly sensitive materials Uses a browser-based content portal application to locate in-progress technical specifications Uses a corporate directory to locate experts when he needs help that the manual doesn t provide 5

6 The Mobile technician Scenario Mobile Access and Security Only log in once to access all the devices corporate applications Standard security across all of the applications not different for each application and not built and designed entirely by the application developer. Detect and prevent fraudulent use of the devices applications Easy integration with corporate infrastructure 6

7 Solution Architecture 7

8 Solution Architecture Oracle Access Management Oracle Access Manager Mobile & Social Oracle Adaptive Access Manager 8

9 Solution Architecture Solution Key Features Strong Authentication Device fingerprinting and risk-based access Device Blacklist Mobile Single Sign on Mobile SDK REST Interfaces 9

10 Solution Architecture Solution Components Webgate and OHS Webcenter Portal Oracle Access Manager Oracle Unified Directory Mobile and Social Server Oracle Adaptive Access Manager Oracle Database 10

11 Example Login Flow Native App with OAM Client App(Mobile) Security App (Mobile) Mobile and Social Server(Server) 1 5 Request Access Token Use token to make calls to server application protected by OAM Oracle SDK - If valid token in local credential store, return token to App, else continue below. - Present login page - Accept username/password - Extracts device attributes and ID contexts - Makes authentication call with user/password, device attributes and device tokens Stores User/Access Token - Returns token to Client App - Validates device tokens - Registers Device/App if unregistered - Authenticates with OAM Server - Invokes OAAM for risk analysis - Responds User/Access Tokens 11

12 Use Cases Demonstration 12

13 Use Cases Demonstration New user registration 13

14 Use Cases Demonstration Authentication 14

15 Use Cases Demonstration Single Sign on 15

16 Use Cases Demonstration Single Sign on 16

17 Use Cases Demonstration Monitoring user sessions 17

18 Use Cases Demonstration Adding device to black list 18

19 Demo 19

20 Mobile Security Architecture Mobile Device DMZ Mobile Interfaces IDM Infrastructure Features Device Fingerprinting & Tracking Oracle SDK Native App Authorization API Access Management OAAM Service Device Registration Lost & Stolen Devices Web App OAG Authentication OAM Service OES Service Risk-based KBA & OTP Transactional risk analysis White & Black Lists SSO Agent REST User Profile API Directory Services User Profile Services User Self Registration/Self Service White Pages applications 20

21 Q & A 21

22 22

23 23