Policy-based, secure, and context-aware
ForgeRock AM enables centralized access control, adaptive authentication, and SSO across hybrid environments. I’ve implemented enterprise-grade policies with OAuth2, OIDC, and SAML integrations — including step-up authentication using device context and biometric WebAuthn via ForgeRock Intelligent Authentication Trees.
Millions of identities, lightning-fast access
With PingDS / ForgeRock Directory Services, I’ve delivered ultra-scalable, replication-ready identity stores that support mission-critical identity and access management at enterprise scale. Whether it's powering Single Sign-On (SSO) flows, adaptive access policies, or zero-downtime failover across global data centers, DS has consistently enabled sub-millisecond read performance under extreme load.
Modern identity orchestration & sync
I’ve designed and implemented both Proofs of Concept and production-grade identity workflows using ForgeRock IDM, enabling dynamic, policy-driven orchestration of the entire identity lifecycle — from onboarding to deprovisioning. ForgeRock IDM serves as the orchestration engine at the heart of automated Identity Governance and Administration (IGA), seamlessly integrating with authoritative sources such as HR systems (e.g., Workday, SAP SuccessFactors), CRMs, and Active Directory.