Downloaded 20 times
Uploaded byStormpath
Instant Security & Scalable User Management with Spring Boot
The document discusses the challenges of implementing user management and authentication in applications. It shows how traditional approaches require developers to implement many aspects of user management including the data store, user models, pages for signup and login, and integration with social providers and single sign-on. Stormpath is presented as a solution that handles these challenges by taking over user management and allowing applications to authenticate users without implementing any of these aspects themselves. The document includes a demonstration of Stormpath's capabilities.
Instant Security & Scalable User Management with Spring Boot
- 1. @lhazlewood | @goStormpath InstantSecurity & Scalable User Management with Spring Boot Les Hazlewood @lhazlewood Apache Shiro Project Chair CTO, Stormpath stormpath.com
- 2. @lhazlewood | @goStormpath SpringSecurity • Authentication • Authorization • Enforcement • No user management
- 3. @lhazlewood | @goStormpath You’reon the hook for: • Data store integration • Data modeling • HTML pages • CSRF view support • Email verification • Forgot password • Oauth2 / Social setup • SAML coordination • Crypto choices • Multi-factor auth • Scale / growth • SaaS Multi-Tenancy • Mobile auth strategy • Microservice auth • Best practices • ...etc...
- 4. @lhazlewood | @goStormpath TraditionalApplication Your Application Users
- 5. @lhazlewood | @goStormpath Whatabout new stores? Users LDAP/AD Your Application
- 6. @lhazlewood | @goStormpath Andlegacy migration? Legacy Users LDAP/AD New Users Your Application
- 7. @lhazlewood | @goStormpath AndSocial? Legacy Users LDAP/AD Google Apps Facebook GitHub New Users Your Application
- 8. @lhazlewood | @goStormpath AndSSO/SAML? Legacy Users LDAP/AD Google Apps Facebook GitHub New Users Your Application Ping Okta Azure ADFS Oracle SSO SiteMinder LinkedIn OneLogin
- 9. @lhazlewood | @goStormpath AndMulti-Tenant / SaaS ? Legacy Users LDAP/AD Google Apps Facebook GitHub New Users Your Application Ping Okta Azure ADFS Oracle SSO SiteMinder LinkedIn OneLogin Customer A Customer C Customer F Customer B Customer D Customer E Customer G
- 10. @lhazlewood | @goStormpath Ohthe Hue Manatee!
- 11. @lhazlewood | @goStormpath Stormpathtakes you from this... Legacy Users LDAP/AD Google Apps Facebook GitHub New Users Your Application Ping Okta Azure ADFS Oracle SSO SiteMinder LinkedIn OneLogin Customer A Customer C Customer F Customer B Customer D Customer E Customer G
- 12. @lhazlewood | @goStormpath Tothis... Your Application
- 13. @lhazlewood | @goStormpath Tothis... Your Application Your Application Your Application Your Application ...
- 14. @lhazlewood | @goStormpath Butmuch more than a backend • Application SDKs • Framework Integrations • Best practices
- 15. @lhazlewood | @goStormpath LiveDemo Time!
- 16. @lhazlewood | @goStormpath Pages& Workflows
- 17. @lhazlewood | @goStormpath SSO& Social
- 18. @lhazlewood | @goStormpath OAuth& Mobile
- 19. @lhazlewood | @goStormpath FlexibleAuthorization
- 20. @lhazlewood | @goStormpath Application ServletFilters How does it work? Spring Security Stormpath MVC Stormpath SDK ...
- 21. @lhazlewood | @goStormpath Stormpathworks hard for you • Java SDK 1.0.0 released last Tuesday! • SDK + Integration Effort: ~ 8 man years • Extreme customizability • Automatic defaults • Often no code required
- 22. @lhazlewood | @goStormpath ThankYou! • les@stormpath.com • Twitter: @lhazlewood • https://stormpath.com
Editor's Notes
- #16 Pages & Workflows SSO & Social OAuth & Mobile Flexible Authorization