ForgeRock® Identity Gateway Core Concepts

Name: ForgeRock® Identity Gateway Core Concepts
Brand: ForgeRock
SKU: IG-400
Price: 3800 USD
Availability: InStock
Rating: 4.61 (7086 reviews)

The ForgeRock® Identity Gateway Core Concepts course is for students who want to examine core concepts and implement key use cases and features of ForgeRock Identity Gateway (IG) to help extend...

$3,800 USD GSA $3,372.68

Course Code IG-400

Duration 4 days

Available Formats Classroom, Virtual

View Schedule Ask a Question Need Group Training?

7086 Reviews star_rate star_rate star_rate star_rate star_half

Enter your Email to Download Full Course Details

The ForgeRock® Identity Gateway Core Concepts course is for students who want to examine core concepts and implement key use cases and features of ForgeRock Identity Gateway (IG) to help extend access to and protect web applications, legacy applications, and application programming interfaces (APIs), within an access management solution. This course comprises a mix of instructor-led lessons and demonstrations with plenty of lab exercises to ensure an opportunity to fully understand each of the topics covered. It provides students with the necessary skills to plan, install, configure, and administer an IG deployment. The main goal of the course is to provide a thorough understanding of, and hands-on experience with IG, so students can control the most important functions of and manage a successful production deployment. Note that Revision B of this course is built on version 6.5 of ForgeRock Identity Gateway.

Skills Gained

Upon completion of this course, you should be able to:

Describe the role and use cases where IG fits within a ForgeRock Identity Platform™ solution, the basic concepts of IG, and how to perform a basic installation and configuration of IG.
Use IG to protect a legacy application.
Configure agentless single sign-on with IG, where authentication can be delegated to AM, including cross-domain, to an OIDC provider, or to a SAML2 Identity provider.
Extend IG to support the retrieval of user profile attributes.
Use IG as a policy enforcement point to protect a given web application, where AM is the policy decision point, and configure authentication step-up and transactional authorization.
Protect a REST API using OAuth2-based solutions.
Extend the solution using scripting.
Prepare for production of an IG project by addressing maintenance, tuning, security, and deployment questions.

Who Can Benefit

The following are the target audiences for this course:

System Integrators
System Consultants
System Architects
System Administrators
Web Developers

Prerequisites

The following are the prerequisites to successfully completing this course:

Basic knowledge and skills using the Linux operating system to complete labs
Basic knowledge of HTTP and communications between clients and web applications is critical to understanding and working with IG
Basic knowledge of JSON, JavaScript, REST, Java, Groovy, SQL, and XML helpful in understanding examples, especially Groovy for scripting within IG
Attendance at AM400 ForgeRock Access Management Core Concepts course or equivalent knowledge

Course Details

Course Contents

Chapter 1: Integrating a web site and a legacy application with IG

Describe the role and use cases where IG fits within a ForgeRock Identity Platform solution, basic concepts of IG, and how to perform a basic installation and configuration of IG.

Lesson 1: Introducing ForgeRock Identity Gateway

Provide an overview of IG
Discuss IG use cases
Present IG features

Lesson 2: Fronting a website with IG

Show how IG acts as a reverse proxy
Discuss proxying WebSocket traffic
Describe installation requirements and install IG
Use IG Studio to protect a website
Examine IG configuration structure

Lesson 3: Routing and processing requests and responses

Understand how IG routes requests depending on external conditions
Describe how Handlers direct requests and responses within a route
Explain how filters process requests and responses
Implement password replay

Lesson 4: Understanding IG Object Model and Logging

Understand the IG object model
Examine request, response, context and session
Use a CaptureDecorator to perform logging
Configure the FileAttributesFilter

Chapter 2: Configuring Agentless Single Sign-On

Demonstrate how to integrate single sign-on in an IG solution by delegating authentication to either an AM solution, including cross-domain, an OIDC provider, or a SAML2 Identity provider.

Lesson 1: Implementing authentication with the SingleSignOnFilter

Use Freeform technology preview to protect a website
Configure an AM Service
Describe the use of the SingleSignOnFilter
Retrieve information from AM using the UserProfileFilter and SessionInfoFilter

Lesson 2: Configuring CDSSO for the legacy application

Describe and implement a CrossDomainSingleSignOnFilter

Lesson 3: Performing SSO with IG as an OpenID Connect relying party

Describe and implement an OAuth2ClientFilter

Lesson 4: Providing SSO with IG as a SAML2 Service Provider

Describe and implement a SAML2FederationHandler
Describe and implement a DispatchHandler

Chapter 3: Controlling access with IG as Policy Enforcement Point

Use IG as a policy enforcement point to protect a given web application, where AM is the policy decision point, using policies and policies with advice to provide authentication step-up and transactional authorization.

Lesson 1: Implementing authorization with a PolicyEnforcementFilter

Describe and implement a PolicyEnforcementFilter

Lesson 2: Providing step-up authentication and transactional authorization

Describe and implement step-up authentication
Describe and implement transactional authorization

Chapter 4: Protecting a REST API

Use IG as an OAuth2 resource server to protect a REST API and demonstrate how the solution can be extended by using scripting.

Lesson 1: Configuring IG as an OAuth2 resource server

Describe and implement an OAuth2ResourceServerFilter
List access token resolvers
Observe the flow with the TokenIntrospectionAccessTokenResolver

Lesson 2: Extending functionality with scripts

Describe the scripting framework for extending IG functionality
Examine and implement dynamic scopes solution

Chapter 5: Preparing for production with IG

Highlight various areas that must be taken into account when preparing to go to production with an IG solution, such as maintenance, tuning, security, and deployment.

Lesson 1: Auditing, monitoring and tuning an IG solution

Describe and implement auditing
Discuss monitoring
Examine tuning questions

Lesson 2: Developing awareness of security questions with IG

Discuss IG best practices regarding security
Examine and implement common secrets
Describe and implement throttling

Lesson 3: Deploying IG

Describe and implement property value substitution
Set up multiple IG instances

Read Less

7 options available

Sep 5, 2023 - Sep 8, 2023 (4 days)

Enroll: Enroll

Dec 5, 2023 - Dec 8, 2023 (4 days)

Language	Time
Live Virtual (iMVP)
English	9:00AM – 5:00PM EST
Select delivery method/location (2 options)
Live Virtual (iMVP) \| 9:00AM – 5:00PM EST Live Virtual (iMVP) \| 9:00AM – 5:00PM EST McLean, VA \| 9:00AM – 5:00PM EST

Enroll: Enroll

When does class start/end?

Classes begin promptly at 9:00 am, and typically end at 5:00 pm.

Does the course schedule include a Lunchbreak?

Lunch is normally an hour long and begins at noon. Coffee, tea, hot chocolate and juice are available all day in the kitchen. Fruit, muffins and bagels are served each morning. There are numerous restaurants near each of our centers, and some popular ones are indicated on the Area Map in the Student Welcome Handbooks - these can be picked up in the lobby or requested from one of our ExitCertified staff.

How can someone reach me during class?

If someone should need to contact you while you are in class, please have them call the center telephone number and leave a message with the receptionist.

What languages are used to deliver training?

Most courses are conducted in English, unless otherwise specified. Some courses will have the word "FRENCH" marked in red beside the scheduled date(s) indicating the language of instruction.

What does GTR stand for?

GTR stands for Guaranteed to Run; if you see a course with this status, it means this event is confirmed to run. View our GTR page to see our full list of Guaranteed to Run courses.

How do I find an ExitCertified training location?

We have training locations across the United States and Canada. View a full list of classroom training locations.

Which delivery formats are available?

At ExitCertified we offer training that is Instructor-Led, Online, Virtual and Self-Paced.

Does ExitCertified deliver group training?

Yes, we provide training for groups, individuals and private on sites. View our group training page for more information.

What does vendor-authorized training mean?

As a vendor-authorized training partner, we offer a curriculum that our partners have vetted. We use the same course materials and facilitate the same labs as our vendor-delivered training. These courses are considered the gold standard and, as such, are priced accordingly.

Is the training too basic, or will you go deep into technology?

It depends on your requirements, your role in your company, and your depth of knowledge. The good news about many of our learning paths, you can start from the fundamentals to highly specialized training.

How up-to-date are your courses and support materials?

We continuously work with our vendors to evaluate and refresh course material to reflect the latest training courses and best practices.

Are your instructors seasoned trainers who have deep knowledge of the training topic?

ExitCertified instructors have an average of 27 years of practical IT experience. They have also served as consultants for an average of 15 years. To stay up to date, instructors will at least spend 25 percent of their time learning new emerging technologies and courses.

Do you provide hands-on training and exercises in an actual lab environment?

Lab access is dependent on the vendor and the type of training you sign up for. However, many of our top vendors will provide lab access to students to test and practice. The course description will specify lab access.

Will you customize the training for our company’s specific needs and goals?

We will work with you to identify training needs and areas of growth. We offer a variety of training methods, such as private group training, on-site of your choice, and virtually. We provide courses and certifications that are aligned with your business goals.

How do I get started with certification?

Getting started on a certification pathway depends on your goals and the vendor you choose to get certified in. Many vendors offer entry-level IT certification to advanced IT certification that can boost your career. To get access to certification vouchers and discounts, please contact customerexp@exitcertified.com.

Will I get access to content after I complete a course?

You will get access to the PDF of course books and guides, but access to the recording and slides will depend on the vendor and type of training you receive.

Instructor was great, course was mostly very good except for too much focus on pricing

ExitCertified Student

ExitCertified

ExitCertified was a great. They gave me all the materials and information I needed ahead of time to prepare for the course.

ExitCertified Student

ExitCertified

The labs and course material gave me valuable insights into cloud security architecture

ExitCertified Student

ExitCertified

Overall it was a good bootcamp. A lot to cover so it is understandable that the pace had to be a little fast.

ExitCertified Student

ExitCertified

Fantastic and great training. Tons of hands-on labs to really make you understand the material being thought.

ExitCertified Student

ExitCertified

ForgeRock® Identity Gateway Core Concepts

Overview

Schedule

FAQ

Reviews

Skills Gained

Who Can Benefit

Prerequisites

Course Details

Course Contents

Chapter 1: Integrating a web site and a legacy application with IG

Chapter 2: Configuring Agentless Single Sign-On

Chapter 3: Controlling access with IG as Policy Enforcement Point

Chapter 4: Protecting a REST API

Chapter 5: Preparing for production with IG

Upcoming Course Dates View more available dates (5)

Format

Language

Country

Location

When does class start/end?

Does the course schedule include a Lunchbreak?

How can someone reach me during class?

What languages are used to deliver training?

What does GTR stand for?

How do I find an ExitCertified training location?

Which delivery formats are available?

Does ExitCertified deliver group training?

What does vendor-authorized training mean?

Is the training too basic, or will you go deep into technology?

How up-to-date are your courses and support materials?

Are your instructors seasoned trainers who have deep knowledge of the training topic?

Do you provide hands-on training and exercises in an actual lab environment?

Will you customize the training for our company’s specific needs and goals?

How do I get started with certification?

Will I get access to content after I complete a course?

Alert!

Modal Title

Error!

Default Title

Subscriber Dialog

Summer Savings

Prompt

Confirm

Login