Modern Identity Management
summary
Modern identity management covers concrete patterns and tools: OAuth/OAuth server for central auth, JWT with JWS (use header/claims/exp/jti/sub/scopes, don’t put passwords in tokens), and options like SMS, TOTP/Guardian, magic links, biometrics and Twilio for delivery. Cites US incident totals—3,800 breaches in H1 2019 and a 54% increase year over year—arguing for migration, provisioning, session handling, anomaly detection, governance and optionally using IDaaS instead of a DIY system.
AI-written summary · about
chapters (31)
- 0:00Start
- 4:36Security is a Team Effort
- 5:21Agenda
- 6:32Bad API Design
- 7:56OAuth
- 10:18Signature Algorithms
- 10:36Exploring JWT
- 12:36Registered Claims
- 14:29What problems does JWT solve?
- 16:21Improve API Design
- 19:33Identity Management (IdM)
- 21:54IdM: Provisioning
- 22:23IdM: Account Management
- 23:17IdM: Identity Governance
- 24:02Identity and Access Management (IAM)
- 24:23IAM: Authorization
- 24:34IAM: Identity Federation
- 26:14Federated Identity
- 27:19IAM: Authentication
- 29:27MFA: Biometrics
- 29:56Passwordless
- 30:32Touch ID
- 30:58SMS Code
- 31:11Magic Link
- 32:02Common Oversights and Pitfalls
- 32:29How will user accounts be created?
- 32:522. Will user profileseed to be synchronized?
- 35:09Is single Sing On needed?
- 36:23Session Timeouts
- 38:0314. Anomaly Detection
- 38:1415 Privacy Compliance
related talks
45mModern Identity Management in the Era of Serverless and Microservices
08mModern Identity Management and Learning from Developers Around the World
32mModern And Secure IAM For Modern Applications
37mCustomer Identity for Modern Apps and APIs
35mIdentity and Access Management for the Decade Ahead
47mModern Authentication 101
38mIdentity and Access Management in the 21st Century
23mFour Components of Modern Identity