This cookbook provides a step-by-step guide to integrating an IBM Security Access Manager system with your IBM Cloud Identity tenant.

This course will introduce you to the basics of IBM Cloud Identity. After completing this course you will be able to set up your IBM Cloud Identity tenant to provide users with seamless access to the applications they need with multi-factor authentication where required.

This cookbook provides a step-by-step hands-on lab guide to setting up an IBM Cloud Identity environment, including both Cloud Identity Connect and Cloud Identity Verify subscriptions, and exploring its capabilities. 

All steps will be performed using your preferred Web browser.

Course Revision: 1.9

IBM Cloud Identity Verify (CIV) is Authentication-as-a-Service (AaaS). It provides a simple REST API which authorized clients can call to initiate a variety of 2nd Factor Authentication (2FA) mechanisms. In addition to the REST interface, IBM also provides a number of “IBM Verify Gateway” applications which allow integration of CIV capabilities with other authentication frameworks:

• IBM Verify Gateway for RADIUS

• IBM Verify Gateway for PAM (on Linux)

• IBM Verify Gateway for PAM (on AIX)

• IBM Verify Gateway for Windows Login

This cookbook provides a step-by-step guide to exploring these integration components.

This video demonstrates how to use the IBM Verify mobile app for password-less login and multiple factor authentication, using biometrics.

IBM Security Access Manager (ISAM) has built-in functionality to allow it to integrate with an IBM Cloud Identity tenant and use the authentication services provided by CIV. This allows applications integrated with ISAM to use the same authentication services as applications directly integrated with CIV.

This cookbook provides a step-by-step guide to integrating an ISAM system with the AaaS capabilities of your IBM Cloud Identity tenant.

IBM Cloud Identity Verify (CIV) is Authentication-as-a-Service (AaaS). It provides a simple REST API which authorized clients can call to initiate a variety of 2nd Factor Authentication (2FA) mechanisms.

This cookbook explores how to integrate a web application, in this case a simple NodeJS Express application, with Cloud Identity Verify. The following Cloud Identity capabilities will be used:

• Username and Password Authentication

• QR Code (password-less) Authentication

• SMS (or e-mail) One Time Password 2nd Factor Authentication

• User information lookup

In this video, you learn about the IBM Cloud Identity platform, as well as, the Cloud Identity Connect (CIC), Cloud Identity Verify (CIV), and Cloud Identity Govern (CIG) offerings.

In this video, you will see a demo of Access Manager integration with Cloud Identity Verify.

In this demonstration of IBM Cloud Identity Connect, you will learn how you can make the most of your bundled IBM Security Access Manager entitlement in order to provide integration with on-premise directories, such as Active Directory, and also how to make use of the strong authentication capabilities in Access Manager for securing your SaaS services.

IBM Cloud Identity is an Identity-as-a-Service (IDaaS) offering which provides your users with rapid and secure access to thousands of popular cloud applications, while enabling single sign-on (SSO) to all their applications, whether from the cloud or on-premise.

This video describes how Cloud Identity administrators can add and fully integrate the applications that users and groups need for their day-to-day operations.

You can authenticate to the IBM Security Cloud Identity platform using your Cloud directory username and password, or using your company or social credentials through an external identity provider. In this video series, you learn about internal and external identity sources supported by Cloud Identity for user authentication.

IBM Cloud Identity is a comprehensive identity and access management solution in the cloud. This training consists of a high-level overview of IBM Cloud Identity services and features, trial subscription process, administration, and user portal demonstrations.

If your organization uses Google G Suite for user authentication, you can configure IBM Security Cloud Identity to allow your users to log in using their G Suite credentials.

This course provides a lab setup and step-by-step instructions on how to set up the SAML 2.0 federation between Cloud Identity and G Suite to configure G Suite as an identity source. G Suite is used as a SAML Identity Provider (IdP) and the Cloud Identity acts as a SAML Service Provider (SP).

In this lab, you explore integrating IBM MaaS360, IBM Cloud Identity, and Active Directory Federation Service (ADFS). In this scenario, Cloud Identity acts as an alternate IaaS (Identity as a Service) provider to ADFS so when ADFS detects a mobile device user, it redirects the authentication request to Cloud Identity. Cloud Identity works with MaaS360 to manage device compliance and enrollment requirements. This lab walks you through integrating all 3 tools in a cohesive, zero-touch, architecture that does not impact your business operations.

Join the IBM Security Learning Services team for an in-depth tour of the Security Learning Academy, with a focus on IBM Security Access Manager and Cloud Identity course offerings. During this webinar, you will see how to navigate the platform, search the course catalog, enroll in a course, view your enrollments on your dashboard, create progress reports, and see how Security Learning Academy is integrated with IBM VIP Rewards for Security.

Whether it’s a document sent over Slack or a game of conference call bingo unfolding on Zoom, telecommuting infrastructure has permeated our working lives. The workplace and classroom have both transformed overnight from cubicles and desks to couches and kitchens.

As employees or students shift to working or learning from home, a diverse range of endpoints need to be managed and protected – including smartphones, tablets, and laptops. Cloud applications should also be deployed to support those trends—providing business continuity for organizations while enabling a frictionless experience for users. This is accomplished via unified endpoint management (UEM), identity and access management (IAM), and web-centric threat defense working in concert.

Further, it’s just as imperative to effectively secure those applications and the devices users rely on for access—whether an organization-issued laptop or a personal tablet.

A program like bring your own device (BYOD), while implying usage in the office, is more of a concern at home due to the risks of unsecured WiFi, unauthorized users, risky downloads and web traffic, and the potential for phishing attacks to compromise credentials.

However, those same problems tend to crop up on organization-issued devices as well—typically deemed a more secure asset. Ultimately, regardless of the device, the human behind the machine presents the risk.

Duration: 53 minutes