Developing Applications Using SDKs

This course is for students who want to learn how to use the SDKs to speed up the integration of JavaScript, Android, and iOS applications, within an access management solution. The course presents key use cases and features of the SDKs.

Note: Revision B of this course is based on version 7 of the Ping Identity Platform (Identity Platform), formerly known as ForgeRock® Identity Platform, and SDK 3.

Upon completion of this course, you should be able to:

• Introduce the SDKs, describe how they fit into the Identity Platform, and how they interact with PingAM, formerly known as ForgeRock® Access Management
• Present the centralized login flow, implement centralized login authentication, and observe device single sign-on (SSO)
• Present the Embedded Login flow and execute authentication, registration, and self-service journey
• Increase the security of your application and enhance the user experience with social authentication, passwordless biometric authentication, device profile and location collection and analysis, and multi-factor authentication (MFA) with one-time passwords (OTPs) and push authentication

The following are the prerequisites for successfully completing this course:

• Basic knowledge and skills using the Linux and Windows operating systems to complete labs
• Basic knowledge of HTTP and communications between clients and servers is critical to understanding the interaction between the SDKs and AM
• Basic knowledge of JSON, JavaScript, REST, and Java
• Good knowledge of either JavaScript, Android, or iOS application development
• Attendance on the PingAM Deep Dive (AM-410) course or equivalent knowledge

• Describe the SDKs
• Explore the role of the SDKs through common use cases
• Technical overview of the SDKs
• Using SDK components
• Interaction between the SDKs and AM

• Preparing the server
• iOS Environment and Project Setup
• Android Environment and Project Setup
• JavaScript Environment and Project Setup
• Preface to the exercises
• Set up an iOS development environment
• Set up an Android development environment
• Set up a JavaScript development environment

• Learn how to use the SDKs with centralized login:
• Understand the login flow choices
• Implement centralized login on mobile
• Implement centralized login in JavaScript
• Authenticate with centralized login on iOS
• Authenticate with centralized login on Android
• Authenticate with centralized login in JavaScript

• SSO between mobile apps with centralized login

• Understand the APIs for Embedded Login
• Authenticate with embedded login on iOS
• Authenticate with embedded login on Android
• Authenticate with embedded login in JavaScript

• Respond to Callbacks
• Respond to Stages
• Respond to stages on iOS
• Respond to stages on Android
• Respond to stages in JavaScript
• (Optional) Transactional authorization

• Respond to registration or self-service journeys
• Implement self-service registration on iOS
• Implement self-service registration on Android
• Implement self-service registration in JavaScript
• Call other journeys / Intercept REST calls
• Implement self-service password change on iOS
• Implement self-service password change on Android
• Implement self-service password change in JavaScript

Lesson 4: Send and Process Verification Emails
Learn how to suspend journey processing and resume after the user followed the resume link sent in email:

• Suspend the journey and await the user following the resume link
• Suspend and resume authentication on iOS
• Suspend and resume authentication on Android
• Suspend and resume authentication in JavaScript
  

Chapter 4: Increasing Security and Enhancing User Experience

• Implement social login
• Login with Google on iOS
• Login with Google on Android
• Login with Google in JavaScript

• Review WebAuthn concepts
• Implement biometric authentication on mobile
• Implement WebAuthn on iOS
• Implement WebAuthn on Android
• Implement web biometric authentication
• Implement WebAuthn in JavaScript

• Configure a user journey to verify and save device profile data
• Device profile processing in the SDKs
• Collect device profile data on iOS
• Implement device profile collection on iOS
• Collect device profile data on Android
• Implement device profile collection on Android
• Collect device profile data in JavaScript
• Implement device profile collection in JavaScript
• Analyze device context
• Implement location-based security
• Collect location information on iOS, Android or in JavaScript
• Implement device tampering detection
• Customize what data is collected
• Check for device tampering and customize device profile collection on iOS
• Check for device tampering and customize device profile collection on Android
• Customize device profile collection in JavaScript

• Integrate the ForgeRock Authenticator Module in a mobile app
• Examine using the Authenticator Module on iOS
• Examine using the Authenticator Module on Android