When does class start/end?
Classes begin promptly at 9:00 am, and typically end at 5:00 pm.
This structured course comprises a mix of instructor-led lessons and demonstrations with plenty of lab exercises to ensure an opportunity to fully understand each of the topics covered. It provides students with a strong foundation for the design, installation, configuration, and administration of a ForgeRock® Access Management (AM) solution and how to implement ForgeRock® Identity Management (IDM) to manage the lifecycle and relationship of digital identities within the context of a Customer Identity and Access Management solution (CIAM), and the integration with the ForgeRock Identity Platform™.
- At this time this course is only available for private deliveries. Please contact us to learn more.
Who Can Benefit
The following are the target audiences for this course:
- System Integrators
- System Consultants
- System Architects
- System Administrators
- System Developers
- System Administrators
Prerequisites
The following are the prerequisites to successfully completing this course:
- Knowledge of Unix/Linux commands and text editing
- An appreciation of HTTP and web applications
- A basic appreciation of how directory servers function
- A basic understanding of REST
- A basic knowledge of Java based environments would be beneficial. Programming experience is not required.
- Basic knowledge and skills using the Linux operating system to complete labs
- Basic knowledge of JSON, JavaScript, REST and Java is helpful for understanding examples; however, programming experience is not required
Course Details
Chapter 1: Performing Basic Configuration
Lesson 1: Implementing Default Authentication
- Describe how to use AM to manage default authentication using cookies
- Implement default authentication with AM
- Understand the need for and the use of realms
- Implement separation of admins and users using realms
- Observe the function of cookies
Lesson 2: Protecting a Website
- List and describe AM authentication clients
- Describe web agent main functionality
- Implement policy enforcement using web agents
- Analyze the am-auth-jwt cookie
Lesson 3: Empowering Users Through Self-Service
- Describe the main capabilities of user self-service
- Configure user self-service self-registration basic flow
Chapter 2: Implementing Intelligent Authentication
Lesson 1: Extending Authentication Functionality
- Describe the authentication mechanisms of AM
- List the available nodes
- Compare tree and chain mechanisms
- Identify realm-level authentication settings
- Use the authentication tree designer and ForgeRock’s Marketplace
- Create and test an authentication tree containing an LDAP Decision node
- Use the recording tool for troubleshooting
Lesson 2: Retrieving User Information
- Understand the use of an identity store
- Explain the distinction between identity store and credentials store
- Implement user-specific features on the website
- Retrieve user profile information using REST
Lesson 3: Increasing Authentication Security
- Discuss the need to increase authentication security
- Implement account lockout
- Configure risk-based authentication
- Configure second-factor authentication
- Demonstrate push notification authentication
Chapter 3: Introducing IDM and Getting Started
Lesson 1: Introducing IDM and Exploring the FEC Solution
- Describe how IDM is used in the ForgeRock Identity Platform to deliver a CIAM solution
- Demonstrate each of the core concepts from an end user and administrator perspective
Lesson 2: Installing IDM
- Describe the basic IDM installation requirements for deploying IDM
- Install and start IDM for the first time and explore the default UIs
- Start IDM with the CSV sample configuration and run the sample
- Start IDM with the LDAP sample configuration and run the sample
Lesson 3: Deploying and Managing IDM as a Project
- Set up a new IDM project for development
- Configure IDM to run as a background process
Lesson 4: Performing Basic IDM Troubleshooting
- Examine the different log files in IDM
- Get additional help troubleshooting outside of IDM
Chapter 4: Enabling User Registration and Self-Service
Lesson 1: Configuring the Default User Registration Process
- Configure the outbound email service
- Enable email-based self-registration
Lesson 2: Configuring IDM User Self-Service
- Enable email-based password reset and username retrieval
- Expand the KBA options
- Add a custom field to the Self-Service UI registration page
Lesson 3: Delegating Administration Privileges
- Add a new internal role and set up privileges to delegate administration
Chapter 5: Managing Synchronization and Reconciliation
Lesson 1: Using the REST Interface to Access IDM
- Query and manipulate IDM objects using the API Explorer and cURL
Lesson 2: Connecting to External Resources Using OpenICF
- Describe how to connect to external resources using OpenICF
- Add a connector to an external LDAP resource
Lesson 3: Performing Basic Synchronization
- Describe how to create sync mappings to flow identity objects and properties between IDM and one or more external resources
- Add a sync mapping from the IDM repository to the LDAP server
- Add a sync mapping from the LDAP server to the IDM repository
Lesson 4: Running Selective Synchronization and LiveSync
- Run selective synchronization using filters
- Identify methods of determining change events with LiveSync
- Schedule LiveSync with the LDAP directory
Lesson 5: Configuring Role-Based Provisioning
- Provision attributes to one or more external resources based on static role assignments
- Provision attributes to one or more external resources based on dynamic role assignments
- Add temporal constraints to a role
Does the course schedule include a Lunchbreak?
Lunch is normally an hour long and begins at noon. Coffee, tea, hot chocolate and juice are available all day in the kitchen. Fruit, muffins and bagels are served each morning. There are numerous restaurants near each of our centers, and some popular ones are indicated on the Area Map in the Student Welcome Handbooks - these can be picked up in the lobby or requested from one of our ExitCertified staff.
How can someone reach me during class?
If someone should need to contact you while you are in class, please have them call the center telephone number and leave a message with the receptionist.
What languages are used to deliver training?
Most courses are conducted in English, unless otherwise specified. Some courses will have the word "FRENCH" marked in red beside the scheduled date(s) indicating the language of instruction.
What does GTR stand for?
GTR stands for Guaranteed to Run; if you see a course with this status, it means this event is confirmed to run. View our GTR page to see our full list of Guaranteed to Run courses.
How do I find an ExitCertified training location?
We have training locations across the United States and Canada. View a full list of classroom training locations.
Which delivery formats are available?
At ExitCertified we offer training that is Instructor-Led, Online, Virtual and Self-Paced.
Does ExitCertified deliver group training?
Yes, we provide training for groups, individuals and private on sites. View our group training page for more information.
Does ExitCertified deliver group training?
Yes, we provide training for groups, individuals, and private on sites. View our group training page for more information.
Great info overall and really appreciate the elaborate explanations from the instructor.
So far I have been very pleased with the quality and the content of the instruction. This is my second course.
Well planned presentations. Live Demo. Excellent labs to ensure comprehension.
The training was excellent which is what I expecting for Amazon software training.
Overall good experience with training and I learned a lot of good information.
0 options available
There are currently no scheduled dates for this course. If you are interested in this course, request a course date with the links above. We can also contact you when the course is scheduled in your area.
Contact Us
1-800-803-3948