Customer Identity for Modern Apps and APIs
summary
Conference roundtable claims that more than half of login attempts are malicious and recommends stopping reuse of leaked credentials by blocking known breached pairs. It shows practical tools: OpenID Connect and OAuth2 for delegated access, passwordless and social logins plus push and authenticator MFA options, and adaptive authentication that triggers MFA only on risky signals. Operational advice includes dashboard-first then automation via APIs, extensibility hooks for custom checks, and GDPR practice of minimal PII with anonymous IDs.
AI-written summary · about
chapters (9)
- 0:00Intro
- 2:00Welcome
- 9:13Multifactor Authentication
- 12:30Credential stuffing
- 16:27B2C and GDPR
- 20:58Building vs buying
- 24:44Security trends
- 28:36Dashboards vs APIs
- 34:47Summary
related talks
32mModern And Secure IAM For Modern Applications
16mInnovation in Authentication and More
45mModern Identity Management in the Era of Serverless and Microservices
40mModern Identity Management
18mInterview Speaker
45mApplying Past Lessons for Intel-Driven Identity Threat Detection
18mSecure your Apps and APIs with strong authentication and Adaptive Access.
31mLog In Through the Front Door: Automating Defense Against...