When does class start/end?
Classes begin promptly at 9:00 am, and typically end at 5:00 pm.
The ForgeRock® Identity Gateway Core Concepts course is for students who want to examine core concepts and implement key use cases and features of ForgeRock Identity Gateway (IG) to help extend...Read More
The ForgeRock® Identity Gateway Core Concepts course is for students who want to examine core concepts and implement key use cases and features of ForgeRock Identity Gateway (IG) to help extend access to and protect web applications, legacy applications, and application programming interfaces (APIs), within an access management solution. This course comprises a mix of instructor-led lessons and demonstrations with plenty of lab exercises to ensure an opportunity to fully understand each of the topics covered. It provides students with the necessary skills to plan, install, configure, and administer an IG deployment. The main goal of the course is to provide a thorough understanding of, and hands-on experience with IG, so students can control the most important functions of and manage a successful production deployment. Note that Revision B of this course is built on version 6.5 of ForgeRock Identity Gateway.
Upon completion of this course, you should be able to:
The following are the target audiences for this course:
The following are the prerequisites to successfully completing this course:
Describe the role and use cases where IG fits within a ForgeRock Identity Platform solution, basic concepts of IG, and how to perform a basic installation and configuration of IG.
Lesson 1: Introducing ForgeRock Identity Gateway
Lesson 2: Fronting a website with IG
Lesson 3: Routing and processing requests and responses
Lesson 4: Understanding IG Object Model and Logging
Demonstrate how to integrate single sign-on in an IG solution by delegating authentication to either an AM solution, including cross-domain, an OIDC provider, or a SAML2 Identity provider.
Lesson 1: Implementing authentication with the SingleSignOnFilter
Lesson 2: Configuring CDSSO for the legacy application
Lesson 3: Performing SSO with IG as an OpenID Connect relying party
Lesson 4: Providing SSO with IG as a SAML2 Service Provider
Use IG as a policy enforcement point to protect a given web application, where AM is the policy decision point, using policies and policies with advice to provide authentication step-up and transactional authorization.
Lesson 1: Implementing authorization with a PolicyEnforcementFilter
Lesson 2: Providing step-up authentication and transactional authorization
Use IG as an OAuth2 resource server to protect a REST API and demonstrate how the solution can be extended by using scripting.
Lesson 1: Configuring IG as an OAuth2 resource server
Lesson 2: Extending functionality with scripts
Highlight various areas that must be taken into account when preparing to go to production with an IG solution, such as maintenance, tuning, security, and deployment.
Lesson 1: Auditing, monitoring and tuning an IG solution
Lesson 2: Developing awareness of security questions with IG
Lesson 3: Deploying IG