Secure your Apps and APIs with strong authentication and Adaptive Access.
summary
Claims that 95% of companies suffered API incidents in 2021 and 34% lack an API security strategy, then shows concrete tooling: OAuth2 / OpenID Connect, the Financial-grade API profile and FIDO2 biometric step-up for strong customer authentication. Demonstrates a payment flow where username/password grants balance scope and a step-up with biometric FIDO2 returns a higher-privilege token for the payment API. Describes Gravitee’s open-source platform, marketplace plugins and cockpits for governance and real-time adaptive MFA policies.
AI-written summary · about
chapters (11)
- 0:00API security challenges
- 1:05Open banking risks
- 2:30Open banking authentication
- 3:55Centralizing identity
- 6:45Strong authentication with MFA
- 8:11Adaptive access
- 11:43Step-up authentication demo
- 13:11Intelligent API security future
- 14:59Gravity platform
- 16:25Open banking advice
- 17:30Q&A
related talks
32mSecuring Value in API Ecosystems
39mSecure your APIs using OAuth2 and OpenID Connect
39mAPI = Authentication’s Poorly Implemented
29mAPI Security in 2017
37mCustomer Identity for Modern Apps and APIs
18mAPI Security Simplified: A 5-Pillar Approach
17mAPI Security Simplified: Practical Tips & Tools
19mAdvanced Authentication Framework