1. salesforce & identity
1.1. apps on the platform already consuming identity services from the sfdc platform
1.2. including customers & partners
1.2.1. extended enterprise users
1.3. now the identity services is provided to any app
1.3.1. user directory
1.3.2. directory integration
1.3.2.1. integrate with external directory, eg, active directory, to sync users behind the scenes
1.3.2.1.1. Salesforce identity connect
1.3.3. SSO
1.3.4. mobile identity
1.3.5. external identities
1.3.6. ...
1.4. customization
1.4.1. add custom fields to users
1.4.2. validation
1.4.3. workflows
1.4.4. login page
1.5. can use other identity providers to sign-in into salesforce
1.5.1. Google, Facebook &c
1.5.1.1. creates a user in sfdc
1.5.1.2. this allows your customers to login to the system
1.5.1.2.1. they will update their Contact entity fields
1.5.1.2.2. can get access to assigned apps
1.5.1.2.3. e.g. in a portal
1.5.2. & active directory via Identity Connect
1.6. App Launcher
1.6.1. SSO into 3rd-party connected apps
1.6.2. authorized by admin
1.6.2.1. directly or thru group permission sets
1.6.2.2. configure security options
1.6.2.2.1. e.g., require 2fa, session expiry
1.6.3. works also on mobile
1.6.3.1. using their canvas
1.6.4. on deprovisioning or freezing a user, immediately denied access & kicked out of running apps
1.6.4.1. freezing useful eg when a device was stolen
1.6.5. user can request access to app
1.6.5.1. goes thru approval workflow
2. Identity & Access management
2.1. right info to the right persons to achieve the business goal
2.2. In the past
2.2.1. on-premise perimeter
2.2.2. direct connection of ppl to systems
2.3. today
2.3.1. no perimeter
2.3.2. apps are accessible from anywhere
2.3.3. more connects parts
2.3.3.1. customers
2.3.3.2. partners
2.3.4. only thing that is still left: identity