Define and Protect Individual Resources According to the UMA Standard

Protect APIs without the lengthy time it takes recoding. The ForgeRock Identity Platform, UMA Protector, built from ForgeRock Identity Gateway, includes:

  • Multi-service protection gateway – Provides an enforcement point over any number of services or APIs, so that multiple UMA resource servers to which the end user has login accounts can be protected by the authorization server.
  • Requester trust elevation for increased security – Ensures that access requesters aren’t just in possession of a “secret link” but goes above and beyond OAuth 2.0 in proving requesters are who they say they are, according to resource owner policy.
  • Dynamic policy enforcement point onboarding – Lets your web API register its digital resources with an UMA authorization server as those resources are created and changed.
  • User-Managed Access (UMA) standard – “UMA-nizes” your web API, turning it into a conforming and interoperable UMA resource server that takes advantage of the UMA Provider’s value-added features.

An Identity Platform Built With the IoT, CIAM, and You in Mind

Digital Identity

Your Customers...

Millions of customers use your digital services--whether cloud, mobile, or IoT. Protect their digital identities and consolidate customer information, so it's easy to create and personalize the customer experience. 


Their Things...

Cars, drones, street lights, gas pumps, wearables, medical devices... they all have a digital identity. With ForgeRock, you establish who these devices belong to, and decide how and with whom (or what) they interact.


Their Choice.

Protect and respect privacy. With ForgeRock, you can let your customers share data selectively. Ask them what’s okay to share, how, when, and with whom. Put them in charge, and they’ll put their trust in you.

Get Started With the ForgeRock Identity Platform

Manage billions of digital identities on new cloud, mobile, and IoT services, all with one unified platform. Try it out today.