UAA Feature Updates and 2017 Roadmap
summary
UAA now supports OIDC discovery and custom user claims with attribute mapping and persistence, and proves working integrations with Google, Azure and Ping (tested by GE). It adds canary key rotation for JWT signing keys and OAuth client secrets via multiple keys and an activeKeyId plus a token_keys endpoint, and plans CredHub/KED integration. It ships opaque tokens for revocation and claim confidentiality, implements token exchange (SAML/JWT) and JWT-bearer client auth, and roadmaps MFA (Google Authenticator) and fine-grained authorization.
AI-written summary · about
chapters (11)
- 0:00Introduction and UAA overview
- 3:16OpenID Connect enhancements
- 9:38Credential rotation and management
- 15:24Token exchange flows
- 19:43Opaque and revocable tokens
- 23:34Client integration libraries
- 26:262017 roadmap overview
- 26:47Multifactor authentication
- 28:56Fine-grained authorization service
- 32:10Performance testing and docs
- 34:16Housekeeping and Q&A
related talks
44mUAA Project Updates and Roadmap - Sree Tummidi, Pivotal
31mCloud Foundry UAA as an Identity Proxy Product Roadmap
15mEvolution of UAA Towards OAuth 2.1 and OpenID Foundation
39mCloud Foundry UAA as an Identity Gateway
31mUser Account and Authorization Server at SAP
37mDeploying UAA to Cloud Foundry and using within your Applications
54mWho's your user? OpenID from the ground-up
46mBearer of Good News