Solving Identity Management In Modern Applications: Demystifying OAuth 2.0, OpenID Connect, And SAML 2.0

✍ Scribed by Yvonne Wilson, Abhishek Hingnikar

• Publisher: Apress
• Year: 2019
• Tongue: English
• Leaves: 323
• Category: Library

✦ Synopsis

Know how to design and use identity management to protect your application and the data it manages. At a time when security breaches result in increasingly onerous penalties, it is paramount that application developers and owners understand identity management and the value it provides when building applications. This book takes you from account provisioning to authentication to authorization, and covers troubleshooting and common problems to avoid. The authors include predictions about why this will be even more important in the future. Application best practices with coding samples are provided. Solving Identity and Access Management in Modern Applications gives you what you need to design identity and access management for your applications and to describe it to stakeholders with confidence. You will be able to explain account creation, session and access management, account termination, and more. What You’ll Learn:
• Understand key identity management concepts
• Incorporate essential design principles
• Design authentication and access control for a modern application
• Know the identity management frameworks and protocols used today (OIDC/ OAuth 2.0, SAML 2.0)
• Review historical failures and know how to avoid them
Who This Book Is For: Developers, enterprise or application architects, business application or product owners, and anyone involved in an application's identity management solution

✦ Table of Contents

Front Matter ....Pages i-xxvi
The Hydra of Modern Identity (Yvonne Wilson, Abhishek Hingnikar)....Pages 1-7
The Life of an Identity (Yvonne Wilson, Abhishek Hingnikar)....Pages 9-18
Evolution of Identity (Yvonne Wilson, Abhishek Hingnikar)....Pages 19-28
Identity Provisioning (Yvonne Wilson, Abhishek Hingnikar)....Pages 29-49
OAuth 2.0 and API Authorization (Yvonne Wilson, Abhishek Hingnikar)....Pages 51-75
OpenID Connect (Yvonne Wilson, Abhishek Hingnikar)....Pages 77-97
SAML 2.0 (Yvonne Wilson, Abhishek Hingnikar)....Pages 99-111
Authorization and Policy Enforcement (Yvonne Wilson, Abhishek Hingnikar)....Pages 113-122
Sample Application with Custom API (Yvonne Wilson, Abhishek Hingnikar)....Pages 123-141
Sessions (Yvonne Wilson, Abhishek Hingnikar)....Pages 143-150
Single Sign-On (Yvonne Wilson, Abhishek Hingnikar)....Pages 151-157
Stronger Authentication (Yvonne Wilson, Abhishek Hingnikar)....Pages 159-166
Logout (Yvonne Wilson, Abhishek Hingnikar)....Pages 167-179
Account Management (Yvonne Wilson, Abhishek Hingnikar)....Pages 181-186
Deprovisioning (Yvonne Wilson, Abhishek Hingnikar)....Pages 187-194
Troubleshooting (Yvonne Wilson, Abhishek Hingnikar)....Pages 195-206
Exceptions (Yvonne Wilson, Abhishek Hingnikar)....Pages 207-217
Less Common Requirements (Yvonne Wilson, Abhishek Hingnikar)....Pages 219-228
Failures (Yvonne Wilson, Abhishek Hingnikar)....Pages 229-240
Compliance (Yvonne Wilson, Abhishek Hingnikar)....Pages 241-252
Looking into the Crystal Ball (Yvonne Wilson, Abhishek Hingnikar)....Pages 253-265
Conclusion (Yvonne Wilson, Abhishek Hingnikar)....Pages 267-268
Back Matter ....Pages 269-311

✦ Subjects

Security, Identity Management