Building a Larger Ecosystem Around WSO2 Identity Server with

Connectors

Thanuja JayasingheMalaka Silva

Overview

o What is WSO2 Identity Server (IS)?o IS product extension points.o Introduction to federated authenticators and multi factor authenticators.o How can community contribute and benefits.o Use case - Securing API with IS and WSO2 API Manager.o Demo of social login.o Demo of two factor authentication.o Demo of provisioning connector.

What is WSO2 Identity Server?

o 100% free and open source with commercial supporto Lightweight and high performanceo Highly modular and extensibleo User friendly with minimal learning curveo Based on open standardso Authentication and Authorizationo Enterprise Single Sign-Ono Federated Single Sign-Ono Provisioningo Identity management and self service capabilities

Identity Server Extension Points

o Bring Your Own Identityo Bring Your Own Deviceo Scenario-driven configurationo Large number of scenarios supported out of the box, through simple

configuration and with ready made extensions

Extend your Authentication and Provisioning

WSO2 Store for Identity Server

● https://store.wso2.com/store●

Support social logins with OAUTH based authenticators

Multi Option Authenticator

o Two factor authenticatoro First basic authenticationo Scanning dancing wave using Phone

Multi Step Authentication

o Why we need provisioning?o Inbound vs Outbound provisioningo Federated Identities can be provisioned into the WSO2 Identity Server while

federatingo Same way local/federated identities can be provisioned to external systems

using provisioning connectors

Provisioning

1. Documentation provides information how to build and required maven archetypes(https://docs.wso2.com/display/ISCONNECTORS/WSO2+Identity+Server+Authenticators+and+Connectors+Documentation).

2. Source location - https://github.com/wso2-extensions3. JIRA location - https://wso2.org/jira/browse/ISCONNECT4. Any issues use our public mailing to communicate (architecture@wso2.org and

dev@wso2.org)

Community Contributions

Use Case – Securing Internal APIs using Multi step authenticators

Use Case – Securing Internal APIs using Multi step authenticators



Demo 01 - Federated authentication with twitter

Demo 02 - Two step authentication with mepin

Demo 02 - Two step authentication with mepin

Demo 03 - Provisioning to inwebo

Q & A

1. Follwoing link will contain details on how we can configure IS as key manager with API manager. https://docs.wso2.com/display/CLUSTER44x/Configuring+WSO2+Identity+Server+as+the+Key+Manager+in+WSO2+API+Manager

2. SSO with ASP.NET app http://wso2.com/library/tutorials/2015/05/tutorial-single-sign-on-for-asp.net-mvc4-web-applications-with-wso2-identity-server/

CONTACT US !

Click here for more on WSO2 Security Webinar Series 2016