Microservices Enablers: DevOps and Identity

To create competitive advantage within today’s disruptive economy, organizations need to not only adapt to customer demands, but they also need the agility to turn on a dime in response to the ever-changing landscape of customer requirements and provide superior and engaging customer experiences --- whether it be online, in store, or across the entire omni-channel journey. In other words, within business, adaptability and agility are the most important attributes for long-term success. Further, due to the exponential increase in cyber-crime, leading organizations are embracing a zero trust model and therefore need to constantly adopt new security features and practices with agility. Of course, accomplishing all of this is easier said than done. Most organizations’ environments are built with monolithic legacy solutions that present significant challenges to adaptability and agility. Because of these challenges, leading organizations are moving to a microservices-based environment for their customer facing applications. 

What are microservices?

Microservices are based on an important development method that focuses on building and deploying applications as groups of modular, composable services within an application. Most are built within a development model called DevOps. DevOps enables software development and deployment to run in a continuous cycle, allowing organizations to rollout new capabilities faster by reducing time to production. Developing microservices infrastructures with DevOps offers agility, adaptability, and flexibility unmatched by the traditional platform providers. Any organization utilizing microservices and DevOps can increase their agility to innovate and gain competitive advantage.

The glue in any successful microservices build for customer facing applications is identity. Identity and access management (IAM) determines which service performs which function on behalf of which user within which business process. With identity-enabled microservices, not only does every transaction get protected, but each microservice, as an identity itself, is managed and secured.

For example, today’s commerce applications are required to perform actions on behalf of customers across a variety of interactions in the customer journey, such as on a website or mobile app, through a call centre, in the physical store through beacons or IoT enabled technologies, or even through other services provided by third parties, --- all within the same environment and often in the same buyer journey. For a consumer to experience frictionless interaction across these different channels, identities must be authenticated across all of the associated microservices. In other words, each microservice needs to know who the consumer is (authentication) and what they are allowed to do (authorization).

Because identity-enabled microservices increase agility, efficiency, resiliency, and revenue, they are fast-replacing large, complex legacy IAM solutions. They also lower project and operational risk, show faster time-to-value, provide flexibility for changing requirements, and more easily support mobile and IoT technologies. 

ForgeRock’s proven support for microservices architectures, and the new challenges they bring, accelerates and risk-mitigates investments. No other provider delivers the comprehensive capabilities to manage identity across this evolving landscape. And, no other provider offers an end-to-end solution that checks all the boxes when migrating existing legacy applications to a microservices architecture.


ForgeRock is designed to easily modernize your legacy identity. Read our latest whitepaper to learn how to transition from a monolithic, legacy environment to microservices.

Who Is Alex Laurie?

Who's Alex? Alex is responsible for the Global ForgeRock Solution Architecture team and has over twenty years of experience in security and identity technology.  During this time he has been involved with digital transformation on both the vendor and system integrator side, working alongside government departments, the military, multiple police forces and the banking sector.  On a daily basis, Alex interacts with enterprise scale organizations supporting clients and partners with his wealth of knowledge in this fast moving sector. Outside of work, Alex races a Cork 1720 yacht from Brighton Marina and really enjoys developing with the crew and the challenge of racing, often in challenging conditions. 

Recent Posts:

Zero Trust and Identity: Evolving from Castles to Cities

The common analogy for protecting computer networks has typically been that of the castle, complete with big walls and surrounding moat. Though this is a good one, the growth and innovation in security technology, including the Zero Trust Model, add complexities.

Augment Your Legacy IAM

Have you ever run into a situation where you know exactly what you have to do to solve the problem but can’t do it?

Modernize IAM for Government: A Real World Example

I recently had the chance to do a podcast with my friend and colleague Tommy Cathey, ForgeRock RVP of Public Sector. Tommy and I have worked together for years, and I am thrilled that he is bringing his deep public sector knowledge to ForgeRock (and this podcast).