Authentication and Authorization in the World of Media and Identity Providers
summary
A centralized authentication system that integrates hundreds of third‑party identity providers is described: backend services issue signed one‑hour access tokens plus refresh tokens, verify tokens offline, and push heavy logic off client devices. The production setup supports 650 operator integrations across 55 countries for 16 brands on five platforms, implemented as 28 microservices with CI/CD (about 10 deploys/day), unit/integration/end‑to‑end tests, Sumo‑based logging, autoscaling per service, and per‑service health/alerting; the remaining shortfall is visibility into failures for individual providers.
AI-written summary · about
chapters (10)
- 0:00Authentication intro
- 3:15Media business needs
- 7:56Cell operator challenges
- 12:23Standardizing auth
- 19:53Backend business logic
- 23:11Microservices migration
- 27:12Continuous Delivery & testing
- 33:40Real-time monitoring
- 38:04External provider monitoring
- 44:02Summary & future plans
related talks
28mBuilding Identity for an Open Perimeter
32mPlatform Security that will Last for Decades
45mModern Identity Management in the Era of Serverless and Microservices
26mOne Auth Gateway to authenticate them all
21mProliferation of Authentication Methods
24mThe Great Balancing Act: Security, UX, and Identity
40mModern Identity Management
01h 12mIdentity 2.0: the what, why and how of social and federated login