Trust, Identity and Access Management for the Cloud Operating System

Transcription

1 ervice Data heet Nteable Qute: Organizatin wihing t mve applicatin t the clud have been held back by the lack f truly native clud-baed identity management lutin. The clud prmie wn t be realized until identity management can prvide a ingle urce f uer adminitratin, hted in a clud datacenter, upprting ingle ign n t multiple clud applicatin by uer whe accunt are managed in multiple clud repitrie. Bb Blakley Vice Preident & Reearch Directr Burtn Grup Trut, Identity and cce Management fr the Clud Operating ytem Tday, a revlutin in cmputing i underway. The clud i the new perating ytem and prmie t free the enterprie f ct and cmplexity; uhering in a new era f imple, n-demand cmputing. Thi clud-baed ecytem ha created a new way fr peple t deply, acce, and ue netwrked infrmatin, applicatin, and reurce. enterprie adpt the clud, new dmain f ecurity mut be managed. The architectural hift t the clud require new technlgy and new thinking n hw trut, identity and acce management can wrk in thi new wrld. ymplified pineered inglepint; the firt identity, acce management and federatin ervice delivered n-demand. Nw, ymplified i intrducing the next generatin f inglepint the ymplified Trut Clud, a unified acce management and federatin platfrm built n the mazn EC2 clud platfrm that uniquely integrate and ecure aa, Iaa, EC2 and Web 2.0 app.» Firt purpe-built IM fr mazn EC2 platfrm» Cmplete unified trut, federated identity and acce management uite» Glbal multi-juridictinal auditing and cmpliance» Maively calable elatic architecture that deply in hur» eamle trut integratin fabric between mazn EC2 and enterprie infratructure like ctive Directry and LDP t a Glance ecurity t Glance» cce Cntrl» uthenticatin» uditing» Prviining» O & Federatin» Virtual Directry P P Benefit» Glbal capability» Cmplete Clud ecurity» Elatic capacity» Eaier cmpliance» Imprved ecurity Partner Cutmer www mplifi ified. ed.cm cm x1 x1 ale@ymplified [email protected] cm Enterprie Remte Emplyee

2 ymplified Trut Clud Enable EC2 ecurity enterprie mve app t the EC2 platfrm they need identity, acce management and federatin and a trut fabric t integrate thee with behind-the-firewall infratructure. Lat generatin perimeter-baed frtre mdel fr enterprie ecurity i n lnger adequate a cmpanie need ecure acce t clud-baed applicatin fr their emplyee, partner, and cutmer utide the firewall. mazn EC2 platfrm mandate a new apprach t trut, identity and acce management. ymplified Trut Clud i the firt lutin t prvide identity, acce and trut management fr mazn EC2 platfrm. Purpe-built trut, identity and acce management fr mazn EC2 The ymplified Trut Clud ha been pecially engineered t wrk eamlely in the mazn EC2 platfrm. The Trut Clud leverage ymplified patent-pending inglepint technlgy that prvide the mt cmplete IM lutin with breakthrugh implicity and integratin capabilitie.» Optimized t take advantage f the advanced netwrking, mnitring and availability capabilitie f the EC2 platfrm.» pin up an entire IM platfrm t ecure and integrate yur mazn EC2 envirnment in hur thrugh ymplified Trut Clud.» Dedicated expert upprt and partnered with the leader in clud ytem integratin, ppiri. ing rt ep R & ing g& t dit nin en u i iagem v n Pr r Ma O e U ted l era d ntr Fe C ce c me n nti ati u R tic en h t rity u cu e xy k r r tw P Ne L & Unified and cmplete IM fr mazn EC2 The ymplified Trut Clud i a turnkey unified IM lutin that prvide acce management, authenticatin, uer prviining and adminitratin, ingle ign-n (O), federated O, and uage auditing fr applicatin running n the mazn EC2 platfrm. Piecemeal apprache t identity and acce management uffer frm expenive integratin and cutmizatin. ymplified Trut Clud prvide a cmplete IM lutin that wrk eamlely tgether r can be deplyed mdularly. The lutin include Web acce management, uer prviining f a clud-native virtual directry, ptinal trng authenticatin and deep auditing. Trut integratin fabric link the clud and n-premie infratructure ymplified imple Link technlgy extend n-premie infratructure like ctive Directry, LDP, databae and Web app acr the firewall. Manage ctive Directry uer a yu d tday by having thee permiin drive acce and authenticatin t clud app n mazn EC2. imple Link, in cnjunctin with the inglepint virtual directry, prvide a rich integratin fabric t link n-premie infratructure fratru t the clud:» ctive Directry, LDP, RDBM» Ue alefrce.cm r Ggle gle a uer er tre» Enable directry hunting t chain multiple uerr Fe de ra te d ut he O nt i c ut at he i n nt N ic et at w i r n k P ec r u vi rit i y n in g ud iti ng repitrie tgether fr authenticatin, acce and pernalizatin cntext» Extend emplyee dektp authenticatin ati n & D at M ab L a W e eb pp LD P D F W in d w ct iv e D ire ct r y K er be r via Windw Kerber IW fr O t mazn EC2 and ther app ther aa a x1 plifi

3 imple ML Federatin Mt rganizatin avid the cmplexity f ML federatin. ymplified ha lved the cmplexity prblem fr federatin-enabling yur rganizatin and yur app. The inglepint Trut Clud prvide fur way t implify federated O:» Pre-integrated federatin hub. Extend O fr yur uer int leading aa app like alefrce, Ggle, Cncur, ucce Factr, Wrkday and many ther. ign n nce t a ymplified-pwered prtal and acce eamle Partner O t dzen f app. N integratin effrt required. upplier» ML ervice Prvider (P). The ymplified Trut Clud prxy can be Cutmer enabled t accept ML O ein t yur app. ymplified handle the cmplexity f validating and decding the ML aertin and imply pae authenticated federated uer int yur mazn EC2 web app ML thrugh HTTP header» Federate with any ML 1.1 and 2.0 applicatin. inglepint Trut Clud ue HTTP-FED t prvide federated O fr applicatin that d nt HQ upprt ML. inglepint Trut Clud erae the need fr federatin ftware and it aciated learning curve, ct and cmplexity. Internal pp» Federate Yur Netwrk and mazn EC2. With the ymplified Trut Clud yu can federate between yur n-premie netwrk and mazn EC2 uing newly releaed DF 2.0 and ML. HTTP-FED ML ML ML HTTP-FED N Viibility? v Cmplete Viibility Lcalized Cmpliance n a Glbal cale T make uer audit and cmpliance reprting fr mazn EC2 app pible, inglepint Trut Clud cllect cnitent uage lg f all activity n the mazn EC2 and aa app. Fr multinatinal rganizatin that perate in different gegraphie, inglepint Trut Clud make it eay t meet natinal and internatinal data gvernance requirement. Fr example, an rganizatin can deply multiple intance f inglepint Trut Clud in different gegraphie t cmply with regulatry mandate that tipulate privacy data mut remain within a vereign cuntry brder r a trading blc territry (e.g. the Eurpean Unin). Trut Clud al enable cmpanie t avid having their identity repitrie hted in cuntrie with far reaching law enfrcement tatute like the U Patrit ct. Trut, Identity and cce Management Platfrm fr Clud ervice Prvider ymplified ha built the Trut Clud with ur ervice prvider partner in mind. Whether yu are a aa applicatin IV, a ytem integratr r a managed ervice prvider, the ymplified Trut Clud allw yu t ffer the clud t yur cutmer withut having t make a maive capital invetment. Partnering with ymplified give yu acce t unmatched expertie in clud trut, identity and acce management and a platfrm that yu can ue n a white-label bai t increae revenue, accelerate aa and Iaa deplyment and increae cutmer tickine. Fr aa IV Uing an O lutin r a uer exiting credential (uch a a uer Windw lgin) can imprve the ucce f aa rll ut by 300% - 400%! Unfrtunately, many aa vendr build ne-ff ecurity integratin fr each cutmer, requiring maintenance and creating a drag n prfeinal ervice rganizatin. Clely integrating with yur cutmer make yur app tickier, thu helping yur ubcriptin renewal. Fr I and Private Clud Operatr Yur cutmer rely n yu a their expert t keep IT running. They demand the latet aa app like alefrce, Ggle, Wrkday, and Cncur. Thee app mut be integrated and ecure. With the ymplified Trut Clud yu can ffer hrizntally cmplementary r vertical-pecific prduct t grw tp-line revenue. Uing inglepint a yur IM and aa aggregatin platfrm, yu can quickly add aa and clud ervice t yur prtfli. Partnering with ymplified eliminate much f the labr Fr Clud Infratructure Prvider Iaa prvider face cntant margin preure frm cmmditizatin. The margin n bandwidth, cmpute and virtualizatin are getting maller. The lutin i t prvide value higher up the tack with ecurity and integratin ervice. With The ymplified Trut Clud yu can mve up the tack and ffer high-value, differentiated IM capabilitie and avid cmmditizatin. By ffering rbut IM ecurity and integratin capabilitie yur ervice are mre enterprie ready and uitable fr mre x1 [email protected]

4 The ymplified Trut Clud pwered by a prven prxy architecture The ymplified Trut Clud architecture wa engineered t wrk with the elatic capabilitie f EC2 - withut agent r ftware. Unlike lat-generatin IM architecture frm C, Oracle, R and Ping that rely n agent r cmplex federatin ftware fr each app, the ymplified Trut Clud ue a prven prxy architecture, like the frm Ggle/Ptini, Mcfee, ymantec, Z-caler - but pecialized fr identity, acce management and federatin. Thi prxy apprach eliminate the brittlene and cmplexity that reult frm being t tightly cupled with the applicatin. The ymplified Trut Clud i c-lcated n the EC2 clud prviding: x1 [email protected]» prxy architecture c-lcated n mazn EC2» n additinal layer f ecurity thrugh the inglepint Trut Clud t buffer direct acce t applicatin» Lely cupled architecture that eliminate dependencie between the Trut Clud and yur app» Burting f VM» The highet perfrmance and acceleratin with edge caching, cmprein and L fflading» Integratin f enterprie and clud identity repitrie t enfrce ecurity plicie Brilliant pt n fr what we need fr ur EC2 app. - Chief ecurity rchitect, Glbal Mbile Cmmunicatin Cmpany The Trut Clud Benefit fter many man-year f dedicated engineering t weave inglepint int mazn EC2, the Trut Clud enable buinee t prviin an intance f their web app in any ecure data center acr the glbe and tap int the Trut Clud IM capabilitie. The ymplified Trut Clud dramatically alter the ct and cmplexity f deplying identity and acce management. It al ecure clud app with fater perfrmance. The ymplified Trut Clud wa built n the fllwing principle:» N prprietary lck-in zer barrier t exit and ability t eaily mve n-premie» upprt the clud, fully and cmpletely» Leverage the advantage f all that mazn EC2 ffer a a 2 billin platfrm» cale infinitely, elatically and reliably» Make lcatin f infratructure, app and uer tranparent» implifie the effrt t enable ML federatin N prprietary lck-in The ymplified Trut Clud wa deigned t be the implet and eaiet way t rll ut IM fr bth mazn EC2-hted app a well a aa app. We recgnize that tday many rganizatin are cautiuly appraching the clud and have cncern abut becming lcked int a particular vendr platfrm and ling the pwer f chice. We believe trngly that ur platfrm huld be a eay t migrate ff f a nt. Thi cmpletely align ur gal with yur. Once yu wrk with ymplified yu ll ee that while ur technlgy i ecnd t nne; ur expert upprt i what keep ur cutmer happy and ucceful. T that end the ymplified Trut Clud wa deigned t:» Nt ue agent ftware r plug-in which mean yu can integrate the Trut Clud withut brittle cutm cde r prprietary ftware. ymplified never intall ftware n the web brwer which mean eay upprt fr external uer like cutmer and partner.» Virtualize uer data and acce it when needed thu eliminating the expene and cmplexity f migrating r cnlidating directrie r databae. With the Trut Clud yu alway wn yur data. In fact, it i never tred n the Trut Clud. If yu decide t leave the Trut Clud, there n migratin iue.» upprt tandard like ML, LDP, OP, HTTP, QL, and RET enabling eay integratin and aviding the need t change r cutmize yur app.» Deply the ymplified Trut Clud in hur with nly a imple netwrk cnfiguratin yu can eaily try it ut and mve frm trial t prductin mthly.

5 upprt the clud fully and cmpletely ymplified wa funded t lve the cmplex prblem that mving t the clud create. We believe that the clud preent ne f the mt diruptive and beneficial evlutin in cmputing. Many cmpanie are ging cmpletely erver-le and mving all their applicatin t the clud. Building n ur unmatched experience a the firt pure-play clud trut, identity and acce management prvider, we have built the mt cmplete lutin fr the clud, delivered ver the clud and integrated with the clud. What et ymplified apart frm lat-generatin enterprie IM ftware prvider?» Only ymplified can integrate with alefrce r Ggle and utilize their uer directrie. If yu have chen t ue Gmail r alefrce then yu are already managing identitie in the platfrm. With the Trut Clud yu can eaily authenticate, authrize and pernalize the experience uing data in the clud.» ymplified wa the firt and cntinue t have the bradet et f upprted aa applicatin fr federated O and acce.» Only ymplified ffer pure pay a yu grw ubcriptin pricing that reflect the n-demand nature f the clud.» N ther cmpany ha mre experience perating an IM platfrm and trut brker. Perid. cale infinitely, elatically and reliably Perfrmance and availability are critical in the clud. With the ymplified Trut Clud yu can achieve level f perfrmance that previuly wuld have required hundred f thuand f dllar frm high end erver. Built upn the mazn EC2 elf-healing cmpute platfrm, the ymplified Trut Clud can ffer unprecedented uptime and availability. Building a cmparable redundant, mnitred and expertly taffed data center n the level that yu get with the ymplified Trut Clud i imply beynd the reach f 99% f enterprie. The ymplified Trut Clud prvide:» % uptime availability guaranteed with a ervice Level greement» The capability t mnitr the health and perfrmance f the ymplified Trut Clud thrugh a brwer» High availability ptin (thrugh ymplified prfeinal ervice) that ffer phiticated lad balanced deplyment Leverage advantage f all that mazn EC2 ffer a a 2 billin clud platfrm mazn ha inveted billin int the EC2 platfrm; far mre than almt any enterprie ha in their wn data center. ymplified ha been uing mazn EC2 internally fr everal year and ver time ha experienced the benefit f ne f the mt pwerful cmpute platfrm in the wrld. mazn ha cntinually refined it technlgy and reach f the EC2 platfrm. ymplified ha cmmitted t leveraging thee trength t make the Trut Clud the mt calable, ecure and reliable platfrm available. With the ymplified Trut Clud yu can eaily:» Deply in any ne f the 30+ mazn EC2 availability zne» Leverage mazn Elatic Lad Balancing ticky ein capability fr cale ut» Leverage different ize f EC2 MI t fit yur budget and perfrmance need» Tap the pwer f the mazn imple DB a a uer repitry What They re aying "Clud-baed, n demand applicatin preent new challenge. New mdel, like ymplified, fr managing and haring identitie are required.. typical IM prject firt phae can eaily ct half a millin dllar, including implementatin ervice and licening ct. (ymplified ) Typical integratin time i day - far belw traditinal time frame f ix t nine mnth. ymplified' IM functin et and available integratin pint with enterprie identity repitrie and external aa ervice are much brader than the f the ther prvider. Edge Caching Cmprein Elatic Clutering Make lcatin f infratructure, app and uer tranparent Tday, mt rganizatin have IT pread acr bth internal netwrk and increaingly n the clud. Migrating app, data r infratructure frm ne t the ther i expenive and ften unneceary if yu culd imply acce it ecurely where it reide. T thi end ymplified ha architected the Trut Clud t prvide a tranparency layer that abtract the lcatin f app, infratructure and uer. With the ymplified Trut Clud:» Uer can gain ecure O whether they are inide the cmpany netwrk, wrking frm hme, frm a mbile device r frm an airprt. ll that needed i a web brwer.» Uer repitrie like ctive Directry, LDP r databae can be inide the crprate netwrk r even in the clud a with alefrce r Ggle.» pplicatin can be hted n mazn EC2, inide yur data center r delivered in the clud a aa app. Pawrd ML Tranparent T Uer Yur Cutmer Yur pp Ue ymplified t ML-Enable Yur pp Withut Mdifying Or Deplying Cmplex Federatin ftware pp N Change Required! x1 [email protected]

6 Dramatically implifie the effrt t enable ML federatin Let face it. ML enabling app i difficult and many rganizatin imply lack budget, infratructure, kill, and time t d thi. Enterprie have t create ne-t-ne cnnectin and ervice prvider have t deal with a ne-ff federatin prject each time a cutmer ak fr it. nd yu have t wait fr yur partner r aa prvider t upprt ML. The ymplified Trut Clud dramatically implifie the effrt t enable ML federatin. There i n need t intall new federatin ftware. inglepint put ML int all yur EC2 app. nd ymplified ffer a pre-integrated federatin hub fr O acr multiple app. ymplified can federate with any ML app and al with HTTP-FED can integrate with virtually any aa app. The ymplified Trut Clud ffer a better way:» Leverage the inglepint Trut and Integratin Brker and cnnect nce t integrate an ecytem f dzen f ppular aa app.» Offlad federatin t the Trut Clud prxy where all ML validatin, decding and cmplexity i dealt with. Yur app get the authenticated, validated uer ein paed int it thrugh indutry tandard HTTP header.» Extend O t the widet range f app with either ML 1.1, 2.0 r HTTP-FED 1.1. v Why inglepint Trut Clud? ymplified ha intrduced grund-breaking technlgy fr cmpanie wh want t cnnect their enterprie t the clud. In particular, the inglepint Trut Clud ha been pecifically architected t wrk with mazn EC2 platfrm. It i the firt and nly IM lutin that wrk fr mazn EC2 cutmer. ymplified ha tw f the bigget name in clud mazn & ppiri a partner t ell, implement and cale deplyment that yu deplyment wrk right the firt time and within budget. The inglepint Trut Clud i indiputably the implet and fatet way t deply an entire federated IM tack. ymplified prvide tw prduct ptin t meet yur pecific need. Fr the lking fr a imple integratin f ML and utilizing a few uer tre, the Trut Clud Federatin Expre i the bet ptin. Fr the enterprie that need the full cmplement f ecurity feature uch a integratin t uer tre behind a firewall (ctive Directry, etc.), app prtal, and acce management they huld cnider the Trut Clud Enterprie Editin. but ymplified: inglepint f ecurity fr the Clud ymplified inglepint prvide a clud-native unified identity and acce management (IM) platfrm that allw cmpanie t extend and enfrce IT ecurity plicie fr acce cntrl, authenticatin, adminitratin/prviining f uer, and auditing, t clud applicatin. vailable either a an n-premie r cmpletely hted lutin, inglepint leverage a prven prxy architecture that wrk withut agent r cutm cde t peed deplyment, implify management and cut ct by a much a 80%. ee What They re aying Uer can ign-n nce and thrugh inglepint are prvided ecure acce t all the clud applicatin they are authrized t ue. Unlike lat-generatin federatin ftware that merely prvide O t ML-enabled app, inglepint i a cmplete IM platfrm that integrate with bth ML and nn-ml applicatin. inglepint grant and denie acce t reurce baed n uer rle and plicie created by the rganizatin and typically already in place, which eliminate identity il and redundant adminitratin. It al prvide deep auditing capabilitie, and can manage acce t bth clud and behind the firewall applicatin. ymplified The Clud ecurity Cmpany ymplified prvide the Trut Fabric f the Clud by enabling cmpanie t extend and enfrce IT ecurity plicie fr acce cntrl, authenticatin, adminitratin/prviining f uer, and auditing, t clud applicatin. ymplified funding management team al created ecurant and the ClearTrut prduct, which pineered the market fr Web acce management, prviining and federatin. ecurant wa acquired by R ecurity fr 140M. ymplified i backed by leading intitutinal venture capital firm Granite Venture and llegi Capital. ymplified i headquartered in Bulder, Cl., with ffice in Pal lt, Calif. Viit u n the web at andhill Cm x1 [email protected] ymplified, Inc - ll Right Reerved. Variu trademark held by their repective wner.