Cloud Foundry UAA as an Identity Gateway
summary
Covers Cloud Foundry UAA's capabilities for acting as an identity gateway for ingress and egress security, including using UAA multi-tenancy exposed via the Cloud Foundry service broker pattern to provide identity as a service for apps and microservices. Describes an identity vision that uses sidecars such as Spring Cloud Gateway and Envoy as lightweight identity proxies to offload OAuth, OpenID Connect and SAML client-side responsibilities from application developers.
AI-written summary · about
chapters (23)
- 0:00Intro
- 1:27Enterprise Application Security
- 2:01Enterprise Identity Management
- 2:57Identity Federation
- 4:41Enterprise API Security Needs
- 5:53OAuth 2.0 API Security
- 7:13Bearer Token
- 7:50JWT-JSON Web Token
- 9:29OAuth Authorization Code Flow
- 13:35OAuth Client Credentials Flow
- 14:34OpenID Connect 1.0
- 15:54OpenID Connect Flow - Simple
- 16:50OpenID Connect Flow - Hybrid
- 17:37Cloud Foundry UAA
- 21:10UAA Basic Concepts
- 23:20UAA as an OAuth Authorization Server
- 25:24Token Exchange - External IDP
- 27:24Token Exchange - Microservices
- 28:34UAA Multi-tenancy
- 29:59SSO Service at a glance
- 35:39Goals
- 36:49Use cases
- 37:28Reference Architecture
related talks
31mCloud Foundry UAA as an Identity Proxy Product Roadmap
28mIdentity: From Legacy to Microservices
24mHow the CF Service Mesh Could Solve Identity and Access...
37mDeploying UAA to Cloud Foundry and using within your Applications
26mExtending Cloud Foundry UAA
31mUser Account and Authorization Server at SAP
41mUAA Feature Updates and 2017 Roadmap
01h 26mSecuring Rest-ful Web Services with OAuth2