Modern Identity Management in the Era of Serverless and Microservices
summary
Statistics show a 50% rise in reported U.S. data breaches in H1 2019 (≈3,808 incidents) and multi‑hundred‑million record losses (Equifax ~145M SSNs, ~99M addresses), so designs that send credentials on every request are unsafe. Modern approach uses OAuth tokens and signed JWTs with claims like jti, iss, exp, scope validated by an API gateway to avoid per‑service crypto work. Identity covers provisioning, account management, governance, federation, MFA and passwordless flows. Demo uses Auth0, Express Gateway and a Webtask function and validates tokens successfully.
AI-written summary · about
chapters (12)
- 0:00Security in modern systems
- 3:14Identity security fundamentals
- 4:59Flaws in API auth designs
- 8:29JWT tokens for auth
- 13:21User credential problems
- 15:25Identity lifecycle
- 21:02Authentication and federation
- 24:54Multi-factor authentication and passwordless options
- 29:36Key identity project tips
- 38:50Identity in serverless
- 40:58Demo: Express Gateway JWT
- 44:19Q&A
related talks
40mModern Identity Management
37mCustomer Identity for Modern Apps and APIs
32mModern And Secure IAM For Modern Applications
08mModern Identity Management and Learning from Developers Around the World
01h 02mModern Authentication
47mModern Authentication 101
01h 06mMicroservice Authentication and Authorization
38mAuthentication as a Microservice: Portable Customer Identity Management