This deck will illustrate why IAM should be top of mind for your enterprise’s success, and how you can leverage it in your transformation journey.

1. Identity & Access Mgt. in an API
driven world
Mifan Careem
VP - Solution Archietecture, WSO2
mifan@wso2.com | @mifanc
INTEGRATION

3. FRICTION-LESS

4. 4

5. 5APIs are cool!

6. Exploiters think APIs are cool as well!

7. “APIs are an attractive target for
threat actors because they act as
the glue linking different services –
they allow data to flow freely from
one area to the next, and thus
provide a rich vein of information if
they are compromised.”

8. IAM in the API driven world
- How do I seamlessly Onboard Developers, Enterprises,
Users...
- Who is using my API - Authentication
- What can they do with my API - Authorization
- API/Token security - Is my access still valid?
8

9. On-Boarding

10. On-boarding with BYoID

11. Multi-Factor
Authentication:
Break authentication
into multiple steps and
verify different
authentication factors
at each step
Moving beyond standard Authentication

12. Authentication can be more dynamic,
responsive and context sensitive
Adaptive Authentication

13. Example - Geo Velocity based Adaptive Auth

14. Solution with WSO2 IAM - Overview

16. What about ‘em tokens?
● Token Validity, Encryption
● HMAC
● Extensions
● Rate limiting, throttling, spike
arrests
● Threat protection
● Token Fraud detection and
real-time analysis
● ...

17. source: https://informationisbeautiful.net/visualizations/worlds-biggest-data-breaches-hacks/

18. THANK YOU
wso2.com

19. What about security?
● Encryption, Tokens, SSO
● Multi-factor authentication
● Fraud detection and
real-time analysis
● Step-up authentication
● Adaptive authentication

20. Uber in
2019