Cloud Foundry UAA as an Identity Proxy Product Roadmap
summary
UAA is being repositioned from an identity provider into an identity proxy that delegates core identity to external IDPs, extracts IDP-specific features (including MFA) out of the product, and focuses on token issuance and OAuth/OIDC conformance. Architectural changes include an externalized session store to remove JVM sticky sessions and enable horizontal scaling behind generic load balancers, Kubernetes integration by issuing signed JWT ID tokens for kube-apiserver, and a modern compiled CLI binary to replace the Ruby uaac client.
AI-written summary · about
chapters (4)
- 0:00Introduction and overview
- 8:35Vision for UAA modernization
- 15:43Tooling improvements and Kubernetes
- 22:51Community feedback and Q&A
related talks
39mCloud Foundry UAA as an Identity Gateway
28mIdentity: From Legacy to Microservices
41mUAA Feature Updates and 2017 Roadmap
44mUAA Project Updates and Roadmap - Sree Tummidi, Pivotal
37mDeploying UAA to Cloud Foundry and using within your Applications
15mEvolution of UAA Towards OAuth 2.1 and OpenID Foundation
26mExtending Cloud Foundry UAA
31mUser Account and Authorization Server at SAP