Identity + API Management Component Relationships
This diagram captures the relationships between concepts I’ve been writing about for a couple of years now.
Read article: Identity + API Management Component RelationshipsIdentity
42 articles tagged Identity.
The Many Ways of Approaching Identity Architecture
At some point in the finite past, I had the good fortune to become involved in a project that was essentially completely greenfield. An unnamed company, in an unnamed industry decided to try something new. In a page right out of “The Innovator’s dilemma”, they spun up a new, separate organization,…
Read article: The Many Ways of Approaching Identity Architecture
The Common Identity Protocols
I’ve written blog posts on the following identity protocols. I’m creating this post to have a central place to refer to “identity protocols”. I will periodically update this list as I publish new posts with related material.
Read article: The Common Identity Protocols
Apigee Edge and Third-Party Identity Provider Integration — Detailed View
This post provides a detailed view of what happens when my example API Proxy that integrates Apigee Edge and a Third-Party Identity Provider for OAuth2 use cases. The setup instructions are available here.
Read article: Apigee Edge and Third-Party Identity Provider Integration — Detailed View
Identity Broker: An SSO Protocol Transition From OpenID Connect To WS-Federation
I’ve been building up to more complex federation use cases over the past year. In previous posts, we explored the details of OpenID Connect(OIDC) and WS-Federation (WS-Fed). In those posts, we covered basic scenarios of how to use each protocol to integrate one Relying Party (Service Provider,…
Read article: Identity Broker: An SSO Protocol Transition From OpenID Connect To WS-Federation
Apigee Edge OAuth2 and Third-Party Identity Providers
This blog post summarizes the details of how to deploy and configure the the Apigee Edge OAuth2 example that I put together. This example will use the OAuth2 Authorization Code Grant and Refresh Token Grant to demonstrate how OAuth2 can be used with Apigee Edge in a real-world application.
Read article: Apigee Edge OAuth2 and Third-Party Identity Providers
Performance Tuning Methodology
I’m taking a brief excursion from my usual identity and API-centric posts to answer a question about performance tuning that someone asked me earlier this year. In a previous incarnation of my career, I was focused on performance tuning and diagnostics — particularly involving Java systems.…
Read article: Performance Tuning Methodology
Identity Propagation in an API Gateway Architecture
The power of end-to-end user security context with APIs
Read article: Identity Propagation in an API Gateway Architecture
SAML v2.0 vs. JWT Series
This is a list of all the SAML2 vs JWT related posts I have written. This series explores SAML2 use cases, JWT use cases, the relevant specifications, and explores how the two technologies differ. The reader will see how identity federation technology has evolved over the past fifteen years.
Read article: SAML v2.0 vs. JWT Series
SAML 2.0 VS. JWT: UNDERSTANDING FEDERATED IDENTITY AND SAML
This post was originally published as “SAML 2.0 VS. JWT: UNDERSTANDING FEDERATED IDENTITY AND SAML” on the Levvel Blog.
Read article: SAML 2.0 VS. JWT: UNDERSTANDING FEDERATED IDENTITY AND SAML