Criticality of identity: The importance of knowing who your API consumer is
summary
Argues that user identity must be the central control for APIs, externalizing authentication and account management so applications use tokens not passwords; recommends OAuth 2.0 for scoped, revocable tokens, reusing existing identity stores and centralizing policies. Cites a surprising datapoint: Salesforce API traffic already exceeds 60% API traffic vs browser traffic. Notes REST dominance and that a working component for SSO for mobile (token manager shared across apps) is under development with VMware and Salesforce.
AI-written summary · about
chapters (10)
- 0:00Start
- 0:37Trends
- 0:57Overview of the Trends
- 3:28Change in Devices
- 6:38Role of Identity
- 9:30User Provisioning
- 9:59The Api Economy
- 12:24The Password Anti-Pattern
- 13:21Federated Authentication
- 15:53Ssl for Mobile Applications
related talks
32mSecuring Value in API Ecosystems
19mIdentity:The missing link in API security
27mThe Nuts and Bolts of API Security: Protecting Your Data at All Times
37mCustomer Identity for Modern Apps and APIs
27mIntegrating API Security Into A Comprehensive Identity Platform
24mTransforming into a Platform for Innovation and Agility
18mSecure your Apps and APIs with strong authentication and Adaptive Access.
19mCreating a Solid Foundation for API Security