At the intersection of consumer, mobile and social identity
Consistent mobile access management and social identity integration for mobile and web applications, on a standards-based, highly scalable platform.
The spread of smart mobile devices and the rapid adoption of the social web changed how companies serve their customers. Identity and access management for mobile and social has often been left behind.
Companies with multiple mobile applications frequently have no single sign-on between them, so each app handles authentication, authorization and token management on its own. Social identities are rarely used consistently across web and mobile. OpenConnect addresses both with a standards-based, highly scalable platform.
Mobile access management
Mobile authentication
A native shared client application for iOS and Android, plus a web application, presents a common login interface with consistent, configurable forgotten-password flows and device lockout policies.
Social login
Customers can sign in and register with their social identities. With stepped authentication, social login grants access to non-critical data while critical areas require a step up to credential authentication. Social identities can optionally be federated with the customer identity.
Mobile single sign-on
Single sign-on between native applications, and between native and web applications. Extensions for web SSO products such as OpenSSO, OpenAM and OAM make integration with existing access management deployments straightforward.
Security
On Android, sensitive information is only reachable by the common login service and by native clients signed with known certificates. On iOS, sensitive data is stored in a Keychain accessible only to a restricted set of applications sharing a bundle ID. Integration with risk-based tools such as Oracle Adaptive Access Manager adds device fingerprinting and adaptive authentication, and devices can be blacklisted and disabled.
Standards
Comprehensive support for OpenID Connect 1.0 and OAuth 2.0, with fully functional OpenID Provider (OP) and Relying Party (RP) implementations.
Key features
- Mobile SSO for native, web and hybrid applications
- Native login applications for iOS and Android
- Secure devices, users and applications independently
- Configurable registration, forgotten password and user consent
- Integration with risk engines like OAAM
- Out-of-the-box integration with web SSO platforms
- Social identities for login and registration, optionally federated with local ones
- Built for consumer-identity scale, with multi-site, multi-server deployments
Key benefits
- Better user experience with single sign-on
- Greater customer uptake with social registration and login
- Stronger security with consistent authentication policies
- Leverage your existing IAM infrastructure
- Lower development and maintenance costs, so teams focus on the core business