This module will help you build secure, robust, centrally managed single sign-on services, where the user, application, or device signs on once and then is granted appropriate access everywhere. Authentication management integrates delegated authentication chains with many authentication methods supported by default. All authentication-related events are logged for auditing and reporting purposes.

Authentication module features are described in Table 1.1, "Module Features".

This module will help you create powerful, context-based policies with a GUI-based policy editor and with REST APIs to control access to online resources. Resources can be URLs, external services, or devices and things. Authorization management lets you manage policies centrally and enforce them locally through installable agents, or through REST, C, and Java applications. Authorization management is extensible, making it possible to define external subjects, complex conditions, and custom access decisions.

Authorization module features are described in Table 1.2, "Module Features".

This module will help you extend SSO capabilities across organization boundaries based on standards-based interoperability.

Federation module features are described in Table 1.3, "Module Features".

This module introduces risk assessment to the authentication and authorization processes. It can be customized to provide risk scoring, flexible conditions, and contextual determination of risk to bar invalid entrants in real time.

Adaptive Risk module features are described in Table 1.4, "Module Features".

This module consists of a consumer-facing implementation of the User-Managed Access (UMA) 1.0 standard. The standard defines an OAuth 2.0-based protocol designed to give individuals a unified control point for authorizing who and what can access their digital data, content, and services. For example, you can use this module to build a solution where end users can delegate access though a share button, and then monitor and change sharing preferences through a central dashboard.

User-Managed Access module features are described in Table 1.5, "Module Features".

This module can serve as the foundation for provisioning and identity data reconciliation. Synchronization capabilities are available as a service and through REST APIs to be used directly by external applications. Activities occurring in the system can be configured to log and audit events for reporting purposes.

Identity Synchronization module features are described in Table 2.1, "Module Features".

This module can be used to allow end users to manage their own passwords and profiles securely according to predefined policies.

The capabilities in this module are shared with ForgeRock Access Management as described in Introducing User Self-Service.

Self-Service module features are described in Table 2.2, "Module Features".

This module can be used to visually organize identity synchronization, reconciliation, and provisioning into repeatable processes with logging and auditing for reporting purposes.

Workflow module features are described in Table 2.3, "Module Features".

With this module, you can allow users to register and authenticate with specified standards-compliant social identity providers. These users can also link multiple social identity providers to the same account, thus establishing a single consumer identity.

With the attributes collected from each user profile, you can configure the module to authorize access to applications and resources, including lead generation tools.

Social identity module features are described in Table 2.4, "Module Features".

ForgeRock Directory Server module features are described in Table 3.1, "Module Features".

ForgeRock Directory Proxy Server module features are described in Table 3.2, "Module Features".

The ForgeRock Identity Gateway module features are described in Table 4.1, "Module Features".