[WSO2 Integration Summit Madrid 2019] Identity and Access Management in an API-driven World

•

2 likes•154 views

This deck will illustrate why IAM should be top of mind for your enterprise’s success, and how you can leverage it in your transformation journey. Join us at a city near you to learn how to achieve API-driven integration agility - https://wso2.com/integration-summits-2019/

Technology

INTEGRATION SUMMIT 2019
Identity and Access Management in
an API-driven World
Christopher Davey
Senior Director, Solutions Architecture - WSO2
INTEGRATION

INTEGRATION SUMMIT 2019
The API-driven World

INTEGRATION SUMMIT 2019
IAM in The API-driven World
ID Token Access Token Refresh Token

INTEGRATION SUMMIT 2019
● Authorization Code
● Implicit
● Client Credentials
● Resource Owner Password
Grant types

INTEGRATION SUMMIT 2019
Authorization Code

INTEGRATION SUMMIT 2019
Client Credentials

INTEGRATION SUMMIT 2019
Resource Owner Password

INTEGRATION SUMMIT 2019
IAM in The API-driven World
1. How to onboard users ?
2. How to authenticate users ?

INTEGRATION SUMMIT 2019
Users Onboarding

INTEGRATION SUMMIT 2019
Users Onboarding
X
Registration Fatigue

INTEGRATION SUMMIT 2019
Users Onboarding - BYoID
Service Provider
Identity Providers

INTEGRATION SUMMIT 2019
Users Authentication

INTEGRATION SUMMIT 2019
● Over 70% of employees reuse passwords at work
● 59% reuse their passwords everywhere
● 81% of hacking-related breaches leveraged either stolen and/or
weak passwords
● The above rate has gone from 50% to 66% to 81% during the
past three years (2017)
‘Passwords’ are Not Secure!
Source - 2017 Verizon Data Breach Investigations Report (DBIR)

INTEGRATION SUMMIT 2019
Users Authentication
X

INTEGRATION SUMMIT 2019
Use Strong Customer
Authentication

INTEGRATION SUMMIT 2019
Multi-factor
Authentication
Break authentication into
multiple steps and verify
different authentication
factors at each step.

INTEGRATION SUMMIT 2019
Authentication Factors
1. Knowledge
■ Something you know
■ Password, passphrase, pin, secret fact
2. Possession
■ Something you have
■ Phone, token, badge, smart card
3. Inherence
■ Something you are
■ Fingerprint, facial feature, voice

INTEGRATION SUMMIT 2019
Authentication Factors
Step 1
Step 2

INTEGRATION SUMMIT 2019
90% Google users have no 2FA
Multi-factor Authentication in Reality

INTEGRATION SUMMIT 2019
What is the Reason?

INTEGRATION SUMMIT 2019
Usability
Security
Convenience

INTEGRATION SUMMIT 2019
Authentication needs to be more dynamic,
responsive and context sensitive
=
Adaptive Authentication

INTEGRATION SUMMIT 2019
Use Case: Geo Velocity

INTEGRATION SUMMIT 2019
Use Case: An Application Request LoA

INTEGRATION SUMMIT 2019
Use Case: Authentication from New Devices

INTEGRATION SUMMIT 2019
WSO2 Identity Server Offering - Overview

INTEGRATION SUMMIT 2019
WSO2 Identity Server Offering - Overview
Static Authentication Flow
● IdP offers static authentication ﬂow to the user
● Multi-factor & Multi-option authentication
● In Multi-option authentication user can pick one
option from each step
Request-based Conditional Authentication Flow
● IdP offers dynamic authentication ﬂow to the user
● Based on attributes of request message
authentication steps will change
● HTTP message, SAML ACR, OIDC ACR

INTEGRATION SUMMIT 2019
WSO2 Identity Server Offering - Overview
User-based Conditional Authentication Flow
● IdP offers static authentication ﬂow to the user
● Based on attributes of identiﬁed user
authentication steps will change
Adaptive/Risk-based Authentication Flow
● IdP offers dynamic authentication ﬂow to the user
● Authentication steps can be based on user
behaviors, environments, history and risk score

INTEGRATION SUMMIT 2019
● Basic API Security can be provided using OAuth2 and OIDC
● Everyone knows passwords are no longer secure.
● Multi-factor authentication offers a perfect solution but less
adopted due to usability issues.
● Multi-factor authentication needs to be more dynamic, responsive
and context sensitive, and we called it ‘Adaptive Authentication’
● WSO2 Identity Server can support any adaptive or risk-based
authentication use case.
Conclusion

INTEGRATION SUMMIT 2019
THANK YOU
wso2.com

What's hot

[WSO2 Integration Summit Nairobi 2019] API-Driven World

WSO2

The industry seems to be moving away from pure open source businesses. WSO2 is going the opposite direction, maintaining a strong commitment to open sourcing our products and open sourcing even more of our IP, building communities, making expertise available to our customers, and bringing transparency to our business culture and operations. This deck explains why we believe our strategy of openness is fundamental to the success of WSO2 and our customers.

[WSO2 Summit Sydney 2019] WSO2's Open Everything Strategy

WSO2

This deck introduces "cell-based" reference architecture, which is API-centric, cloud-native, and microservices-friendly. Further explains the role of APIs in the cell-based approach, as well as examine how real applications are built as cells. The deck covers metrics and approaches that can be used to measure the effectiveness of the architecture and explore how organizations can implement the cell approach.

[WSO2 Integration Summit Nairobi 2019] Emerging Architecture Patterns: API-ce...

WSO2

[WSO2 Integration Summit Johannesburg 2019] Technology Market Outlook and Str...

WSO2

API Security has become an important concern in recent times as organizations are more cautious about exposing raw, sensitive data via APIs. Therefore, it is important that APIs adhere to the OpenAPI Specification (OAS) to ensure API security. WSO2 has partnered with 42Crunch, to bring in the ability to conduct a security audit on the OpenAPI Specification definition, and to obtain an audit report. The WSO2 API Manager 3.1 brings a lot of interesting features, including the ability to run 42Crunch’s audit tool directly from the API Publishing portal. In this webinar, we will: - Explain the advantages of introducing security at design time - Introduce the 42Crunch audit functionality - Explain how 42Crunch and WSO2 API Manager can be used together for better API Security

42Crunch Security Audit for WSO2 API Manager 3.1

WSO2

Identity Hub’s Role in Social Logins

WSO2

[WSO2 Integration Summit Singapore 2019] The API-driven World

WSO2

[WSO2 Integration Summit Johannesburg 2019] WSO2's Open Everything Strategy.

WSO2

WSO2 Integration Summit Johannesburg 2019 - Leveraging Enterprise Integration...

WSO2

[WSO2 Integration Summit Milan 2019] API-Driven World

WSO2

[WSO2 Integration Summit Singapore 2019] Transforming Your Business through APIs

WSO2

Successful digital strategy requires the ability to change and adopt to establish your digital presence. APIs create the connectivity required to share enterprise data and digital capabilities across many channels over the Internet. So how do you go about creating and managing an API program while navigating the inherent challenges of exposing your internal capabilities outside the enterprise and sustaining it? This deck looks at how to craft a successful API strategy. Want to attend a WSO2 Integration Summit? Find us at a city near you - https://wso2.com/integration-summits-2019/

[WSO2 Summit Sydney 2019] Building a Successful API Strategy from Scratch and...

WSO2

[WSO2 Integration Summit Singapore 2019] Achieving Predictable Success in Dig...

WSO2

[WSO2 Integration Summit Singapore 2019] API-driven Microservice Architecture

WSO2

Watch the on-demand webinar here: https://wso2.com/library/webinars/an-entry-point-to-impactful-open-banking-architecture/ Description: Banks in Europe, the UK, and Australia have been hard at work prototyping new use cases and operating models that leverage open data and collaboration. In regions like Africa, Latin America, and South and Southeast Asia, we are seeing customer demand and shifting expectations drive increased adoption of open banking models, even where regulation doesn't explicitly require it. A growing number of fintechs and “challenger banks” have emerged seeking to capitalize on customers looking for easier and more intuitive financial experiences. In this deck we’ll cover how you can make the most of these developments and invest in the long term. Discussion topics include: Open banking fundamentals as relevant to systems design with reference to PSD2 specifications and the Australian Consumer Data Standards, along with related concepts from the GDPR regime. Open banking reference architectures to create adaptable open APIs, open data, and open platforms for technical and business agility. Leveraging internal capabilities and data to craft a competitive advantage. Beyond open banking - Banking Product Design Canvas, the Banking 4.0: Digital Factory, and the SMB Capability Uplift.

An Entry Point to Impactful Open Banking Architecture

WSO2

[WSO2 Integration Summit London 2019] Identity and Access Management in an AP...

WSO2

[WSO2 Summit Sydney 2019] Open Banking from the Trenches: How European Banks ...

WSO2

Digital transformation is the integration of digital technology into all areas of a business, fundamentally changing how you operate and deliver value to customers. It's also a cultural change that requires organizations to continually challenge the status quo, experiment, and get comfortable with failure. It is essential that you integrate digital technology into all areas of business so that your business can be agile and adapts to changing circumstances. Microservices architecture gives you the agility required to build a digital business, while APIs are the enablers for turning a conventional business into a digital business. In this webinar, we will discuss how an enterprise can adopt an API-first approach for building a digital business leveraging microservices architecture. We will explain and show the business benefits of: - An API-first approach for building a digital business - How microservices enables business agility - Building and integrating your microservices - Modernization of your legacy applications - How to leverage the WSO2 API integration platform to build a digital business. Watch the webinar on-demand here - https://wso2.com/library/webinars/api-first-integration-for-microservices/

API-first Integration for Microservices

WSO2

[WSO2 Integration Summit Bern 2019] API-led Integration

WSO2

What's hot (19)

[WSO2 Integration Summit Nairobi 2019] API-Driven World

[WSO2 Summit Sydney 2019] WSO2's Open Everything Strategy

[WSO2 Integration Summit Nairobi 2019] Emerging Architecture Patterns: API-ce...

[WSO2 Integration Summit Johannesburg 2019] Technology Market Outlook and Str...

42Crunch Security Audit for WSO2 API Manager 3.1

Identity Hub’s Role in Social Logins

[WSO2 Integration Summit Singapore 2019] The API-driven World

[WSO2 Integration Summit Johannesburg 2019] WSO2's Open Everything Strategy.

WSO2 Integration Summit Johannesburg 2019 - Leveraging Enterprise Integration...

[WSO2 Integration Summit Milan 2019] API-Driven World

[WSO2 Integration Summit Singapore 2019] Transforming Your Business through APIs

[WSO2 Summit Sydney 2019] Building a Successful API Strategy from Scratch and...

[WSO2 Integration Summit Singapore 2019] Achieving Predictable Success in Dig...

[WSO2 Integration Summit Singapore 2019] API-driven Microservice Architecture

An Entry Point to Impactful Open Banking Architecture

[WSO2 Integration Summit London 2019] Identity and Access Management in an AP...

[WSO2 Summit Sydney 2019] Open Banking from the Trenches: How European Banks ...

API-first Integration for Microservices

[WSO2 Integration Summit Bern 2019] API-led Integration

Similar to [WSO2 Integration Summit Madrid 2019] Identity and Access Management in an API-driven World

[WSO2 Integration Summit Nairobi 2019] Identity and Access Management in an A...

WSO2

[WSO2 Open Banking & Security Forum Mexico 2019] Walking the Tightrope: Balan...

WSO2

WSO2 - Yenlo Integration Summit Stuttgart 15 May 2019 - Decentralizing APIs f...

Yenlo

WSO2 API Day Toronto 2019 API-driven World

WSO2

The WSO2 Integration summit was opened by Shevan Goonetilleke, President and Chief Operating Officer at WSO2. He explained in a simple phrase what WSO2 is all about: “Building the technology to connect systems and expose as APIs and secure integrations”. That we are in an API-driven world is highlighted by the fact that 25% to 40% of all internet traffic consist of APIs being consumed by mobile apps and web-based applications.

Powering an API-driven world | Yenlo - WSO2 Integration Summit 2019, San Fran...

Yenlo

APIs and integration is suddenly the hottest sector in enterprise software! This deck will discuss how APIs are touching every facet of our society and the underlying trends that are going to generate nearly 1 billion APIs in the coming years. All digital transformation is now API-driven and integration technologies underpin their evolution. As the world becomes digitally-native, how will the role of enterprise architecture shift? How do we leverage cloud native and agility initiatives? This deck discusses, - The impact APIs are having on digital transformation - WSO2's roadmap for API-driven initiatives - A reference architecture for agility - A new agility methodology for integration - How microservices will pervade integration products - Our commitment and role of Ballerina (cloud native programming language) - New channel and reseller programs for partners

[WSO2 Integration Summit San Francisco 2019] The API-driven World

WSO2

[WSO2 Integration Summit Nairobi 2019] Transforming Your Business Through APIs

WSO2

APIs and integration is suddenly the hottest sector in enterprise software! Charndika will discuss how APIs are touching every facet of our society and the underlying trends that are going to generate nearly 1 billion APIs in the coming years. All digital transformation is now API-driven and integration technologies underpin their evolution. As the world becomes digitally-native, how will the role of enterprise architecture shift? How do we leverage cloud-native and agility initiatives? In this deck, Charndika will discuss - The impact APIs are having on digital transformation - WSO2's roadmap for API-driven initiatives - A reference architecture for agility - A new agility methodology for integration - How microservices will pervade integration products - Our commitment and role of Ballerina (cloud-native programming language) - New channel and reseller programs for partners

[WSO2 Integration Summit London 2019] The API-driven World

WSO2

[WSO2 Open Banking & Security Forum Mexico 2019] API-Driven World

WSO2

APIdays Paris 2019 - Zero Downtime in API Management by Waldemar Rosenfeld, A...

apidays

What's new in API Connect and DataPower - 2019

IBM DataPower Gateway

In this webinar from November 2015, John Barco (VP of Product Management) and Tim Sedlack (Sr. Product Manager) take you on a journey: A long time ago in a technology sector far, far away, organizations were promised a unified platform for centralizing identity and integrating it into resources everywhere. But this promise was never realized. Instead, organizations were forced down a dark path to implement a piecemeal identity infrastructure that was painful, with massive integration costs. Finally, the wait is over. In this webinar, we will provide an overview of ForgeRock's unified platform and highlight all the common services provided across the end-to-end solution to make your life easier. Learn more about ForgeRock Access Management: https://www.forgerock.com/platform/access-management/ Learn more about ForgeRock Identity Management: https://www.forgerock.com/platform/identity-management/

Webinar: Identity Wars: The Unified Platform Awakens

ForgeRock

“The whole is greater than the sum of its parts” - In this world of disaggregated, cloud native architectures, developers are increasingly adopting micro services to build Complex Systems. APIs play a huge role in creating a sustainable platform and a good API driven micro services design is key to building and scaling these complex systems. Whilst API Management and API Gateways have traditionally been used for north-south communication, Service Meshes and specialised gateways have emerged to handle complexity for East-West communication. The “parts” work, but is the “whole greater than the sum of its parts”? That’s the objective of this talk. We apply method to madness, and take a critical look at the role of APIs in cloud native, service mesh driven complex system design. We will look at how various API technologies including full lifecycle API Management, API Gateways and Micro-gateways, API Proxies and frameworks to build on-the-fly gateways play with Service Meshes like Istio and LinkerD, proxies like Envoy and ingress gateways. We will also look at practical examples of how full lifecycle API Management play an important role in Service Mesh based K8S Infrastructure.

[WSO2 Integration Summit New York 2019] API Management in a Cloud Native Serv...

WSO2

Cloud Identity Summit 2017 talk We will show and explain why APIs are essential in a digital context. We will describe use cases, illustrate with real-life situations where APIs are used and demonstrate that they are a design pattern needed in thousands of different places, following dozens of IT architectures We will present industry’s best practices to design well-secured APIs and explain which particular specification is intended for which use-case. We will present key security aspects to take into account when designing an API and its access infrastructure.

CIS 2017 - So you want to use standards to secure your APIs?

Bertrand Carlier

APIs are the oil of the digital world. Different forms and types of APIs power the digital mesh to which we’re all connected to. The potential and reach of APIs however are heavily underutilized today in many organizations. The root cause of this seems to be the lack of a “product mindset” on APIs. Organizations that strategically invest in building a product mindset for APIs have been successful in putting themselves significantly ahead of the curve in innovation. In this session, Sanjeewa will talk about six key points that will be valuable for API product managers and architects to bring in a product mindset to APIs within their organizations. This will help them to build a more streamlined, agile, and repeatable process that converts their APIs into digital products.

[WSO2 Summit EMEA 2020] APIs: The Products of the 21st Century

WSO2

APIdays Zurich 2019 - APIs for real time communication Miguel Lopes, Dialogic

apidays

Managing Identity without Boundaries

Ping Identity

Digital business initiatives are at the forefront of enterprise growth strategies in today's application economy. Enterprises are looking to take advantage of new technology and create opportunities to launch innovative new services and open up the enterprise. CA Security and API Management solutions provide the ability to share enterprise data and digital content over the internet securely empowering developers to create apps across all of these new channels. For more information, please visit http://cainc.to/Nv2VOe

Creating an Omnichannel Experience for Your Customers

CA Technologies

Watch webinar recording: https://wso2.com/library/webinars/deliver-new-digital-experiences-fast-with-choreo/ To differentiate yourself, you need to create unique and compelling digital experiences for both internal and external customers. However, this can be difficult and slow due to the complexity that comes from integrating existing systems, building new services, and managing APIs. Piecing together the development and operation technologies you need - including Kubernetes, Docker, and service meshes - takes time and requires dedicated expertise to manage, which can be hard to come by. Choreo is a Digital Platform, as a service, for delivering new digital experiences. Choreo abstracts away the complexity of cloud-native infrastructure for your dev and ops teams so you can create new services, integrations, and APIs in hours or days instead of weeks or months. This slide deck explores how you can use Choreo to - Innovate in hours, not months by creating, composing, collaborating on, and reusing API-driven business logic - Replace your complex infrastructure and coding with tools that make dev and ops simple and fast - Make security and governance part of your DevOps automation with a platform where everything is secured and governed by default

Delivering New Digital Experiences Fast - Introducing Choreo

WSO2

apidays LIVE India 2022: Accelerating India’s digitisation with APIs May 11 & 12, 2022 Building the API Banking capability Abhijit Dey, Deputy VP, Product Head API Banking at Axis Bank ------------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/ Deep dive into the API industry with our reports: https://www.apidays.global/industry-reports/ Subscribe to our global newsletter: https://apidays.typeform.com/to/i1MPEW

apidays LIVE India 2022 - Building the API Banking capability

apidays

Similar to [WSO2 Integration Summit Madrid 2019] Identity and Access Management in an API-driven World (20)

[WSO2 Integration Summit Nairobi 2019] Identity and Access Management in an A...

[WSO2 Open Banking & Security Forum Mexico 2019] Walking the Tightrope: Balan...

WSO2 - Yenlo Integration Summit Stuttgart 15 May 2019 - Decentralizing APIs f...

WSO2 API Day Toronto 2019 API-driven World

Powering an API-driven world | Yenlo - WSO2 Integration Summit 2019, San Fran...

[WSO2 Integration Summit San Francisco 2019] The API-driven World

[WSO2 Integration Summit Nairobi 2019] Transforming Your Business Through APIs

[WSO2 Integration Summit London 2019] The API-driven World

[WSO2 Open Banking & Security Forum Mexico 2019] API-Driven World

APIdays Paris 2019 - Zero Downtime in API Management by Waldemar Rosenfeld, A...

What's new in API Connect and DataPower - 2019

Webinar: Identity Wars: The Unified Platform Awakens

[WSO2 Integration Summit New York 2019] API Management in a Cloud Native Serv...

CIS 2017 - So you want to use standards to secure your APIs?

[WSO2 Summit EMEA 2020] APIs: The Products of the 21st Century

APIdays Zurich 2019 - APIs for real time communication Miguel Lopes, Dialogic

Managing Identity without Boundaries

Creating an Omnichannel Experience for Your Customers

Delivering New Digital Experiences Fast - Introducing Choreo

apidays LIVE India 2022 - Building the API Banking capability

More from WSO2

Architecting Cloud Native Applications

WSO2

This slide deck explores how platformless offers a revolutionary approach to enterprise software engineering, hiding platform complexities and empowering developers to focus on what they do best — building high-impact apps. Key takeaways: - Challenges of building platforms and the benefits of platformless. - Key principles of platformless, including API-first, cloud-native middleware, platform engineering, and developer experience. - How Choreo enables the platformless experience. - How key concepts like application architecture, domain-driven design, zero trust, and cell-based architecture are inherently a part of Choreo. - How Choreo simplifies the adoption and use of cloud platforms including Microsoft Azure. - Demo of an end-to-end app built and deployed on Choreo. Try out Choreo for free and see how it enables a platformless experience for you - https://wso2.com/choreo

Accelerating Enterprise Software Engineering with Platformless

WSO2

How to Create a Service in Choreo

WSO2

Ballerina Tech Talk - May 2023

WSO2

This slide deck introduces Choreo, a cloud native internal developer platform by Microsoft independent software vendor (ISV) Partner, WSO2. It enables your developers to create, deploy, and run new digital components like APIs, microservices, and integrations in serverless mode on any Kubernetes cluster with built-in DevSecOps. Recording: https://wso2.com/choreo/resources/webinar/platform-strategy-to-deliver-digital-experiences-on-azure/

Platform Strategy to Deliver Digital Experiences on Azure

WSO2

Slides presented at Gartner IT Symposium - Barcelona with our valued customer Fluidra. We live in an experience economy, where all enterprises must focus on providing better digital experiences. Checkout these slides where WSO2 and Fluidra, discussed around a real-world success story, and find out what we’re building to help businesses adapt. Discuss Points : 1) Learn how an API-first strategy resulted in significant quality and performance improvements, a collaborative culture around API governance, and faster delivery times. 2) Deep dive into topics like key challenges, how WSO2’s product suite helped with enterprise reinvention, and future plans.

GartnerITSymSessionSlides.pdf

WSO2

Webinar recording: https://wso2.com/choreo/resources/webinar/how-to-create-an-api-in-minutes/ APIs help developers do their jobs faster and smarter. However, the time, effort, and developer skill set needed to build an API can be daunting. To realize the gains that APIs offer, organizations now need digital platforms that can address the complex challenges of connecting apps, systems, and data. This includes building integrations and APIs and exposing them to internal and external consumers in a future-proof manner. Choreo is a digital platform as a service that lets companies develop, deploy, and manage APIs, services, and integrations fast. It enables Dev and Ops to go from ideation to production in hours or days by abstracting away the complexity of cloud-native computing. During the webinar, we will cover: - How to create an API in minutes using Choreo’s graphical and pro-code view - How to deploy and test your API - How to publish your API and make it available in the marketplace

[Webinar] How to Create an API in Minutes

WSO2

As the world is recovering from the pandemic, the education industry is among the top industries undergoing large-scale digital transformation. Providing enhanced online learning options, ensuring seamless digital experiences, and adhering to security and privacy regulations are some key challenges facing education institutions. Ellucian Ethos Identity, powered by WSO2, is a customer identity and access management (CIAM) platform that enables educational institutions to achieve their digital goals. Asgardeo is a CIAM-as-a-service offering that is an alternative for organizations who are looking to offload hosting and maintenance to another provider while also being able to bridge identities with Ellucian Ethos Identity.

Modernizing the Student Journey with Ethos Identity

WSO2

Every organization is looking to differentiate needs to create unique and compelling digital experiences for both external and internal customers. And yet, building these experiences is difficult and slow due to the complexity that comes from integrating existing systems, building new services, and managing new APIs. Piecing together the development and operation technologies you need — including Kubernetes, Docker, and service meshes — takes time and requires dedicated expertise to manage. Choreo is a Digital Platform as a Service for delivering new digital experiences optionally pre-integrated with Ethos Identity. Choreo enables you to shift your focus from operations back to development by abstracting away the complexity of cloud-native infrastructure so you can create new integrations, services, and APIs in hours or days instead of weeks or months. Explore how Choreo can make your digital development and operations fast, simple, and secure.

Choreo - Build unique digital experiences on WSO2's platform, secured by Etho...

WSO2

A Foundation for Fast Digital Innovation Creating a differentiated digital experience is critical to most businesses today. And it must be built, not bought. While APIs are the foundation of digital innovation, it takes more than just developing an API to innovate faster. Come learn what it takes, including the API-led technologies and other components of a cloud-native digital platform, and a few tricks you need to consider that will help you focus on what's important to innovate fast. By the end of this session you will understand; How a digital platform enables fast innovation The different technology components, capabilities, and processes companies use to build a cloud-native digital platform Some of the best practices that other companies have used to improve API design, and reuse, and deliver faster

CIO Summit Berlin 2022.pptx.pdf

WSO2

Fueling the Digital Experience Economy with Connected Products

WSO2

A Reference Methodology for Agile Digital Businesses

WSO2

Workflows in WSO2 API Manager - WSO2 API Manager Community Call (12/15/2021)

WSO2

Lessons from the pandemic - From a single use case to true transformation

WSO2

Adding Liveliness to Banking Experiences

WSO2

Building a Future-ready Bank

WSO2

WSO2 API Manager Community Call - November 2021

WSO2

Polling-based APIs or the RESTful APIs were the main building blocks of traditional integration stories. But with the need to respond to events in real-time, integration architecture has shifted from being polling-based to event-driven. With the emergence of reactive event-driven architecture, the asynchronous APIs were able to hold their distinct position in modern-day integrations. Even though the event-driven APIs provide their own advantages such as high resiliency, high responsiveness, and more, management of asynchronous APIs continues to be a challenge to the organizations. The AsyncAPI specification plays a major role in the event-driven world by providing a specification to describe and document the asynchronous APIs. These slides will explore the entire flow from creating an asynchronous API to exposing it as a managed API by adhering to the AsyncAPI specification.

[API World ] - Managing Asynchronous APIs

WSO2

Microservices and APIs built for digital transformation products require agile, reliable, and scalable cloud native infrastructure to truly meet customer expectations for a great "always there" user experience. Whether deployed on-premises or hosted in a public cloud, understanding and leveraging the right approach is key to success. This session takes up where the development process leaves off, tracking the standardization of containers and container orchestration for automated deployment, including current and future platform trends WSO2 and others are following.

[API World 2021 ] - Understanding Cloud Native Deployment

WSO2

Every thriving API program leverages the elements from business and technology equally. Alignment of business and technology strategy, the synergy between business and technical teams, and adaptability to the changes coming from either business or technology are fundamental characteristics of such an environment. Asanka will look at four areas, federation and business models, moving to the cloud, polyglot and heterogeneous approach, and modernizing development during this talk. He will also share real-world examples based on his involvement in numerous success stories.

[API Word 2021] - Quantum Duality of “API as a Business and a Technology”

WSO2

More from WSO2 (20)

Architecting Cloud Native Applications

Accelerating Enterprise Software Engineering with Platformless

How to Create a Service in Choreo

Ballerina Tech Talk - May 2023

Platform Strategy to Deliver Digital Experiences on Azure

GartnerITSymSessionSlides.pdf

[Webinar] How to Create an API in Minutes

Modernizing the Student Journey with Ethos Identity

Choreo - Build unique digital experiences on WSO2's platform, secured by Etho...

CIO Summit Berlin 2022.pptx.pdf

Fueling the Digital Experience Economy with Connected Products

A Reference Methodology for Agile Digital Businesses

Workflows in WSO2 API Manager - WSO2 API Manager Community Call (12/15/2021)

Lessons from the pandemic - From a single use case to true transformation

Adding Liveliness to Banking Experiences

Building a Future-ready Bank

WSO2 API Manager Community Call - November 2021

[API World ] - Managing Asynchronous APIs

[API World 2021 ] - Understanding Cloud Native Deployment

[API Word 2021] - Quantum Duality of “API as a Business and a Technology”

Recently uploaded

Enterprise Knowledge’s Urmi Majumder, Principal Data Architecture Consultant, and Fernando Aguilar Islas, Senior Data Science Consultant, presented "Driving Behavioral Change for Information Management through Data-Driven Green Strategy" on March 27, 2024 at Enterprise Data World (EDW) in Orlando, Florida. In this presentation, Urmi and Fernando discussed a case study describing how the information management division in a large supply chain organization drove user behavior change through awareness of the carbon footprint of their duplicated and near-duplicated content, identified via advanced data analytics. Check out their presentation to gain valuable perspectives on utilizing data-driven strategies to influence positive behavioral shifts and support sustainability initiatives within your organization. In this session, participants gained answers to the following questions: - What is a Green Information Management (IM) Strategy, and why should you have one? - How can Artificial Intelligence (AI) and Machine Learning (ML) support your Green IM Strategy through content deduplication? - How can an organization use insights into their data to influence employee behavior for IM? - How can you reap additional benefits from content reduction that go beyond Green IM?

Driving Behavioral Change for Information Management through Data-Driven Gree...

Enterprise Knowledge

What are drone anti-jamming systems? The drone anti-jamming systems and anti-spoof technology protect against interference, jamming, and spoofing of the UAVs. To protect their security, countries are beginning to research drone anti-jamming systems, also known as drone strike weapons. The anti-jam and anti-spoof technology protects against interference, jamming and spoofing. A drone strike weapon is a drone attack weapon that can attack and destroy enemy drones. So what is so unique about this amazing system?

What Are The Drone Anti-jamming Systems Technology?

Antenna Manufacturer Coco

GenCyber Cyber Security Day Presentation

Michael W. Hawkins

This presentations targets students or working professionals. You may know Google for search, YouTube, Android, Chrome, and Gmail, but did you know Google has many developer tools, platforms & APIs? This comprehensive yet still high-level overview outlines the most impactful tools for where to run your code, store & analyze your data. It will also inspire you as to what's possible. This talk is 50 minutes in length.

Powerful Google developer tools for immediate impact! (2023-24 C)

wesley chun

Data Cloud, More than a CDP by Matt Robison

Anna Loughnan Colquhoun

The 7 Things I Know About Cyber Security After 25 Years | April 2024

Rafal Los

The presentation explores the development and application of artificial intelligence (AI) from its inception to its current status in the modern world. The term "artificial intelligence" was first coined by John McCarthy in 1956 to describe efforts to develop computer programs capable of performing tasks that typically require human intelligence. This concept was first introduced at a conference held at Dartmouth College, where programs demonstrated capabilities such as playing chess, proving theorems, and interpreting texts. In the early stages, Alan Turing contributed to the field by defining intelligence as the ability of a being to respond to certain questions intelligently, proposing what is now known as the Turing Test to evaluate the presence of intelligent behavior in machines. As the decades progressed, AI evolved significantly. The 1980s focused on machine learning, teaching computers to learn from data, leading to the development of models that could improve their performance based on their experiences. The 1990s and 2000s saw further advances in algorithms and computational power, which allowed for more sophisticated data analysis techniques, including data mining. By the 2010s, the proliferation of big data and the refinement of deep learning techniques enabled AI to become mainstream. Notable milestones included the success of Google's AlphaGo and advancements in autonomous vehicles by companies like Tesla and Waymo. A major theme of the presentation is the application of generative AI, which has been used for tasks such as natural language text generation, translation, and question answering. Generative AI uses large datasets to train models that can then produce new, coherent pieces of text or other media. The presentation also discusses the ethical implications and the need for regulation in AI, highlighting issues such as privacy, bias, and the potential for misuse. These concerns have prompted calls for comprehensive regulations to ensure the safe and equitable use of AI technologies. Artificial intelligence has also played a significant role in healthcare, particularly highlighted during the COVID-19 pandemic, where it was used in drug discovery, vaccine development, and analyzing the spread of the virus. The capabilities of AI in healthcare are vast, ranging from medical diagnostics to personalized medicine, demonstrating the technology's potential to revolutionize fields beyond just technical or consumer applications. In conclusion, AI continues to be a rapidly evolving field with significant implications for various aspects of society. The development from theoretical concepts to real-world applications illustrates both the potential benefits and the challenges that come with integrating advanced technologies into everyday life. The ongoing discussion about AI ethics and regulation underscores the importance of managing these technologies responsibly to maximize their their benefits while minimizing potential harms.

Artificial Intelligence: Facts and Myths

Joaquim Jorge

Axa Assurance Maroc - Insurer Innovation Award 2024

The Digital Insurer

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

The Digital Insurer

[2024]Digital Global Overview Report 2024 Meltwater.pdf

hans926745

With more memory available, system performance of three Dell devices increased, which can translate to a better user experience Conclusion When your system has plenty of RAM to meet your needs, you can efficiently access the applications and data you need to finish projects and to-do lists without sacrificing time and focus. Our test results show that with more memory available, three Dell PCs delivered better performance and took less time to complete the Procyon Office Productivity benchmark. These advantages translate to users being able to complete workflows more quickly and multitask more easily. Whether you need the mobility of the Latitude 5440, the creative capabilities of the Precision 3470, or the high performance of the OptiPlex Tower Plus 7010, configuring your system with more RAM can help keep processes running smoothly, enabling you to do more without compromising performance.

Boost PC performance: How more available memory can improve productivity

Principled Technologies

Handwritten Text Recognition for manuscripts and early printed texts

Maria Levchenko

BooK Now Call us at +918448380779 to hire a gorgeous and seductive call girl for sex. Take a Delhi Escort Service. The help of our escort agency is mostly meant for men who want sexual Indian Escorts In Delhi NCR. It should be noted that any impersonator will get 100 attention from our Young Girls Escorts in Delhi. They will assume the position of reliable allies. VIP Call Girl With Original Photos Book Tonight +918448380779 Our Cheap Price 1 Hour not available 2 Hours 5000 Full Night 8000 TAG: Call Girls in Delhi, Noida, Gurgaon, Ghaziabad, Connaught Place, Greater Kailash Delhi, Lajpat Nagar Delhi, Mayur Vihar Delhi, Chanakyapuri Delhi, New Friends Colony Delhi, Majnu Ka Tilla, Karol Bagh, Malviya Nagar, Saket, Khan Market, Noida Sector 18, Noida Sector 76, Noida Sector 51, Gurgaon Mg Road, Iffco Chowk Gurgaon, Rajiv Chowk Gurgaon All Delhi Ncr Free Home Deliver

08448380779 Call Girls In Diplomatic Enclave Women Seeking Men

Delhi Call girls

presentation ICT roal in 21st century education

jfdjdjcjdnsjd

Partners Life - Insurer Innovation Award 2024

The Digital Insurer

Strategies for Landing an Oracle DBA Job as a Fresher

Remote DBA Services

Heather Hedden, Senior Consultant at Enterprise Knowledge, presented “The Role of Taxonomy and Ontology in Semantic Layers” at a webinar hosted by Progress Semaphore on April 16, 2024. Taxonomies at their core enable effective tagging and retrieval of content, and combined with ontologies they extend to the management and understanding of related data. There are even greater benefits of taxonomies and ontologies to enhance your enterprise information architecture when applying them to a semantic layer. A survey by DBP-Institute found that enterprises using a semantic layer see their business outcomes improve by four times, while reducing their data and analytics costs. Extending taxonomies to a semantic layer can be a game-changing solution, allowing you to connect information silos, alleviate knowledge gaps, and derive new insights. Hedden, who specializes in taxonomy design and implementation, presented how the value of taxonomies shouldn’t reside in silos but be integrated with ontologies into a semantic layer. Learn about: - The essence and purpose of taxonomies and ontologies in information and knowledge management; - Advantages of semantic layers leveraging organizational taxonomies; and - Components and approaches to creating a semantic layer, including the integration of taxonomies and ontologies

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf

Enterprise Knowledge

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Martijn de Jong

The Raspberry Pi 5 was announced on October 2023. This new version of the popular embedded device comes with a new iteration of Broadcom’s VideoCore GPU platform, and was released with a fully open source driver stack, developed by Igalia. The presentation will discuss some of the major changes required to support this new Video Core iteration, the challenges we faced in the process and the solutions we provided in order to deliver conformant OpenGL ES and Vulkan drivers. The talk will also cover the next steps for the open source Raspberry Pi 5 graphics stack. (c) Embedded Open Source Summit 2024 April 16-18, 2024 Seattle, Washington (US) https://events.linuxfoundation.org/embedded-open-source-summit/ https://eoss24.sched.com/event/1aBEx

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

Igalia

Three things you will take away from the session: • How to run an effective tenant-to-tenant migration • Best practices for before, during, and after migration • Tips for using migration as a springboard to prepare for Copilot in Microsoft 365 Main ideas: Migration Overview: The presentation covers the current reality of cross-tenant migrations, the triggers, phases, best practices, and benefits of a successful tenant migration Considerations: When considering a migration, it is important to consider the migration scope, performance, customization, flexibility, user-friendly interface, automation, monitoring, support, training, scalability, data integrity, data security, cost, and licensing structure Next Wave: The next wave of change includes the launch of Copilot, which requires businesses to be prepared for upcoming changes related to Copilot and the cloud, and to consolidate data and tighten governance ShareGate: ShareGate can help with pre-migration analysis, configurable migration tool, and automated, end-user driven collaborative governance

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

sammart93

Recently uploaded (20)

Driving Behavioral Change for Information Management through Data-Driven Gree...

What Are The Drone Anti-jamming Systems Technology?

GenCyber Cyber Security Day Presentation

Powerful Google developer tools for immediate impact! (2023-24 C)

Data Cloud, More than a CDP by Matt Robison

The 7 Things I Know About Cyber Security After 25 Years | April 2024

Artificial Intelligence: Facts and Myths

Axa Assurance Maroc - Insurer Innovation Award 2024

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

[2024]Digital Global Overview Report 2024 Meltwater.pdf

Boost PC performance: How more available memory can improve productivity

Handwritten Text Recognition for manuscripts and early printed texts

08448380779 Call Girls In Diplomatic Enclave Women Seeking Men

presentation ICT roal in 21st century education

Partners Life - Insurer Innovation Award 2024

Strategies for Landing an Oracle DBA Job as a Fresher

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

[WSO2 Integration Summit Madrid 2019] Identity and Access Management in an API-driven World

1. INTEGRATION SUMMIT 2019 Identity and Access Management in an API-driven World Christopher Davey Senior Director, Solutions Architecture - WSO2 INTEGRATION

2. INTEGRATION SUMMIT 2019 The API-driven World

3. INTEGRATION SUMMIT 2019 The API-driven World

4. INTEGRATION SUMMIT 2019 The API-driven World

5. INTEGRATION SUMMIT 2019 The API-driven World

6. INTEGRATION SUMMIT 2019 The API-driven World

7. INTEGRATION SUMMIT 2019 The API-driven World

8. INTEGRATION SUMMIT 2019 The API-driven World

9. INTEGRATION SUMMIT 2019 IAM in The API-driven World ID Token Access Token Refresh Token

10. INTEGRATION SUMMIT 2019 OAuth2

11. INTEGRATION SUMMIT 2019 ● Authorization Code ● Implicit ● Client Credentials ● Resource Owner Password Grant types

12. INTEGRATION SUMMIT 2019 Authorization Code

13. INTEGRATION SUMMIT 2019 Implicit

14. INTEGRATION SUMMIT 2019 Client Credentials

15. INTEGRATION SUMMIT 2019 Resource Owner Password

16. INTEGRATION SUMMIT 2019 IAM in The API-driven World 1. How to onboard users ? 2. How to authenticate users ?

17. INTEGRATION SUMMIT 2019 Users Onboarding

18. INTEGRATION SUMMIT 2019 Users Onboarding X Registration Fatigue

19. INTEGRATION SUMMIT 2019 Users Onboarding - BYoID Service Provider Identity Providers

20. INTEGRATION SUMMIT 2019 Users Authentication

21. INTEGRATION SUMMIT 2019 ● Over 70% of employees reuse passwords at work ● 59% reuse their passwords everywhere ● 81% of hacking-related breaches leveraged either stolen and/or weak passwords ● The above rate has gone from 50% to 66% to 81% during the past three years (2017) ‘Passwords’ are Not Secure! Source - 2017 Verizon Data Breach Investigations Report (DBIR)

22. INTEGRATION SUMMIT 2019 Users Authentication X

23. INTEGRATION SUMMIT 2019 Use Strong Customer Authentication

24. INTEGRATION SUMMIT 2019 Multi-factor Authentication Break authentication into multiple steps and verify different authentication factors at each step.

25. INTEGRATION SUMMIT 2019 Authentication Factors 1. Knowledge ■ Something you know ■ Password, passphrase, pin, secret fact 2. Possession ■ Something you have ■ Phone, token, badge, smart card 3. Inherence ■ Something you are ■ Fingerprint, facial feature, voice

26. INTEGRATION SUMMIT 2019 Authentication Factors Step 1 Step 2

27. INTEGRATION SUMMIT 2019 90% Google users have no 2FA Multi-factor Authentication in Reality

28. INTEGRATION SUMMIT 2019 What is the Reason?

29. INTEGRATION SUMMIT 2019 Usability Security Convenience

30. INTEGRATION SUMMIT 2019 Solution ?

31. INTEGRATION SUMMIT 2019 Authentication needs to be more dynamic, responsive and context sensitive = Adaptive Authentication

32. INTEGRATION SUMMIT 2019 Use Case: Geo Velocity

33. INTEGRATION SUMMIT 2019 Use Case: An Application Request LoA

34. INTEGRATION SUMMIT 2019 Use Case: Authentication from New Devices

35. INTEGRATION SUMMIT 2019 WSO2 Identity Server Offering - Overview

36. INTEGRATION SUMMIT 2019 WSO2 Identity Server Offering - Overview Static Authentication Flow ● IdP offers static authentication ﬂow to the user ● Multi-factor & Multi-option authentication ● In Multi-option authentication user can pick one option from each step Request-based Conditional Authentication Flow ● IdP offers dynamic authentication ﬂow to the user ● Based on attributes of request message authentication steps will change ● HTTP message, SAML ACR, OIDC ACR

37. INTEGRATION SUMMIT 2019 WSO2 Identity Server Offering - Overview User-based Conditional Authentication Flow ● IdP offers static authentication flow to the user ● Based on attributes of identified user authentication steps will change Adaptive/Risk-based Authentication Flow ● IdP offers dynamic authentication flow to the user ● Authentication steps can be based on user behaviors, environments, history and risk score

38. INTEGRATION SUMMIT 2019 ● Basic API Security can be provided using OAuth2 and OIDC ● Everyone knows passwords are no longer secure. ● Multi-factor authentication offers a perfect solution but less adopted due to usability issues. ● Multi-factor authentication needs to be more dynamic, responsive and context sensitive, and we called it ‘Adaptive Authentication’ ● WSO2 Identity Server can support any adaptive or risk-based authentication use case. Conclusion

39. INTEGRATION SUMMIT 2019 THANK YOU wso2.com

[WSO2 Integration Summit Madrid 2019] Identity and Access Management in an API-driven World

Recommended

Recommended

More Related Content

What's hot

What's hot (19)

Similar to [WSO2 Integration Summit Madrid 2019] Identity and Access Management in an API-driven World

Similar to [WSO2 Integration Summit Madrid 2019] Identity and Access Management in an API-driven World (20)

More from WSO2

More from WSO2 (20)

Recently uploaded

Recently uploaded (20)

[WSO2 Integration Summit Madrid 2019] Identity and Access Management in an API-driven World