apidays LIVE Australia 2021 - How API’s are securing sensitive customer data using fine grained authorisation as a service by Samuel Frank, Auth0

Sep 29, 20210 likes773 views

apidays LIVE Australia 2021 - Accelerating Digital September 15 & 16, 2021 How API’s are securing sensitive customer data using fine grained authorisation as a service Samuel Frank, Senior Product Manager at Auth0

auth0.com
Fine Grained
Authorization
How APIs are unlocking AuthZ for all
-Sam Frank, Sr PM - New Initiatives

auth0.com
Sandcastle
Agenda
1. Context: SaaS for Builders
2. What’s Next: Fine Grained Authorization (FGA) as a Service
a. Deﬁning FGA
b. What does it allow you to do?
3. How We’re Implementing It
a. Google Zanzibar
b. ReBAC
c. Architecture

auth0.com
Bill Gates
Sandcastle
One Good Version
“Microsoft might spend a lot of money to develop
the ﬁrst unit of a new program, but every unit after
that is virtually free to produce.”

auth0.com
Sandcastle
One Good Version: Software for Builders

New York
JULY
Australia
SEPTEMBER
Singapore
APRIL
Helsinki & North
MARCH
Paris
DECEMBER
London
OCTOBER
Jakarta
FEBRUARY
Hong Kong
AUGUST
JUNE
India
MAY
Check out our API Conferences here
50+ events since 2012, 14 countries, 2,000+ speakers, 50,000+ attendees,
300k+ online community
Want to talk at one of our conferences?
Apply to speak here

auth0.com
Business
Logic
Supporting
Code
Only write your business
logic
Everything else will
become packaged for you
AUTH0 DATADOG
STRIPE TWILIO Libraries
INFRA Code
Sandcastle
The Endgame Your Stack

auth0.com
THIS IS A PLACEHOLDER.
YOU CAN PUT HERE AN IMAGE, GIF,
DIAGRAM OR CHART
What’s Next?
Sandcastle
FGaaS - Fine Grained Authorization
as a Service:

auth0.com
Sandcastle
Authentication (AuthN)
Are you who you say you are?
Authorization (AuthZ)
Are you allowed to do that?

auth0.com
THIS IS A PLACEHOLDER.
YOU CAN PUT HERE AN IMAGE, GIF,
DIAGRAM OR CHART
What does it do?
Sandcastle
Unlocks object level access control
at scale for any stack.

auth0.com
Sandcastle
What it’s not:
RBAC
ABAC

auth0.com
Sandcastle
Globally Distributed PDP or PIP

auth0.com
Thanks.
learn.sandcastle.cloud
@auth0lab

The document discusses issues with API terms of service (ToS), including a lack of trust and communication between API users and suppliers, asymmetrical relationships that constrain users, and a lack of sustainability for some users. It proposes several approaches to address these issues, including enhancing trust and simplifying the contractual process, standardizing ToS, providing certifications for sustainable APIs, and potentially legislation. The goal is to balance power relationships and integrate ToS with digital economic regulations, while facilitating interoperability and usability between APIs and ToS. Input is sought from the community to help co-design prototypes and solutions.

apidays LIVE London 2021 - Banking APIs Evolution by Hector Arias, BBVAapidays

apidays LIVE Australia 2021 - Unlocking the Internet of Things with Telco API...apidays

INTERFACE, by apidays - Design for your API customers with APIOps Cycles by ...apidays

apidays LIVE Australia 2021 - How to Achieve Zero-Trust Security With Kuma Se...apidays

apidays LIVE Hong Kong - The Future of Legacy - How to leverage legacy and on...apidays

[WSO2 Integration Summit Bern 2019] Composable EnterpriseWSO2

This document discusses the growing importance of APIs and integration in enabling composable and disaggregated architectures. It makes three key points: 1) Consumer demand and supplier strategies are driving increased disaggregation of applications and services, requiring hybrid integration between on-prem and cloud. APIs are the "glue" enabling this integration. 2) APIs are increasingly important both for external access of services but also internal integration within organizations. They represent digital business capabilities that can be marketed and monetized. 3) A cellular architecture modeling organizations and systems as composable, independently deployable "cells" can help overcome integration challenges and enable agility at scale. The WSO2 API Microgateway and Cellery platform aim

apidays LIVE Australia 2021 - Designing Embedded Platforms by Jeremy Glassenb...apidays

O'Reilly author webinar "APIs: A Strategy guide": Transforming Your Business...Apigee | Google Cloud

[WSO2 Integration Summit Bern 2019] Transforming Your Business through APIsWSO2

The document discusses how APIs are driving digital transformation and the app economy. It outlines several key points: 1) APIs enable innovation through agility by allowing for small, focused teams to build and iterate quickly, as opposed to siloed operations with long development cycles. 2) To truly be agile, an API should be managed by a small "two-pizza team" that owns the full lifecycle from design to deployment. 3) An API marketplace approach where internal teams can publish, discover, and consume APIs promotes participation, transparency, and allows the "market" to decide what is most useful.

apidays LIVE London 2021 - Getting started with Event-Driven APIs by Hugo Gue...apidays

Cloud Native Application Integration With APIsNirmal Fernando

Cloud native application architectures focus on building applications as microservices and running them on containers that run on dynamic orchestration platforms and utilize cloud computing functionalities. Agile DevOps and continuous delivery pipelines ensure agility and speed of application development and faster time to market. These systems follow a number of design principles to ensure they are built as loosely coupled services designed for cloud scale and performance. A core design principle is the use of APIs for application integration. Underlying cloud orchestration layers provide certain functionalities for integration via APIs - be it RESTful or internal formats such as Protbuf, Thrift, gRPC, NATS, etc. APIs thus play an important role for both internal services communications as well as integration between composite apps. A cloud-native API gateway that also provides features of a full lifecycle API Management is key. In this deep dive workshop, we look at the concepts of cloud-native app integration via APIs which utilize cloud-native API management. We focus on the architecture, design concepts followed by the implementation of API led microservices and then look at the runtime component which includes DevOps, CICD and hybrid clouds.

INTERFACE, by apidays - How APIs are making innovation exponential by Shaile...apidays

apidays LIVE London 2021 - What are SMART APIs by Patrick Brosse, Amadeusapidays

BizTalk 2010 with Appfabric Hosting in the Cloud: WCF Services vs BT2010Bala Subra

apidays LIVE New York 2021 - API Economy in Financial Services by Giovanni Le...apidays

[apidays Live australia] Building a Sustainable Ecosystem with Open APIs for ...WSO2

Business agility is your organisations ability embrace change. Its all about evolution of values, behaviours and capabilities to provide a better UX. Open architecture, Open API and Open Data provides an organization the agility, independence and promotes reuse. This slides elaborate on real-world patterns and industry experience that enabled a traditional organisation to become agile and think big.

apidays LIVE Australia 2021 - Leveraging Async APIs to deliver Cross Domain A...apidays

apidays LIVE New York 2021 - API narrative: A true story of APIs and I by Div...apidays

ROI for APIs: Using Hackathons to Evaluate Your API ProgramCA API Management

Use hackathons to gather data on the value of your API publishing program APIs are quickly becoming brands of their own and requiring product management strategies and marketing campaigns to be built around them to ensure they are effective. Hackathons provide a great way to grow developer awareness of APIs and attract the attention of thought leaders and influencers. But how do you demonstrate quantifiable ROI? Join this webinar with AT&T's Developer Evangelist, Alex Donn, TechCrunch's Hackathon Events Manager Leslie Hitchcock and Layer 7's API Evangelist, Alex Gaber to learn how you can get feedback and data from hackathons that will help you prove the value of your API program. You Will Learn Which ROI metrics business managers want to see What types of product research and testing you can conduct at a hackathon How to collect feedback and data at the event Presented by: Leslie Hitchcock Hackathon Events Manager TechCrunch Alex Donn Developer Evangelist AT&T Alex Gaber API Evangelist Layer 7

INTERFACE, by apidays - API First mentality by Tanya Vlahovic, eBayapidays

APIdays Zurich 2019 - The Three Pillars of API Strategy Erik Wilde, GoodAPIapidays

Digital transformation initiatives are ubiquitous but often have low success rates. This presentation outlines API strategies as an essential component, discussing the three pillars - business, team, and technology - that are necessary for API strategy success. Vision, strategy, and execution must be synchronized. The business pillar involves using APIs to increase delivery speed and decrease costs. The team pillar means increased autonomy for teams. The technology pillar refers to API platforms and standards. All three pillars must have managed initiatives and progress indicators for digital transformations to succeed.

apidays LIVE London 2021 - Open up the vault by Katrien Van Gijsel, KBCapidays

Oracle Code Capgemini: API management & microservices a match made in heavenluisw19

Oracle Code Beijing/Sydney APIM & Microservices: A Match Made in HeavenCapgemini

Luis Weir was the speaker at the Oracle Code 2017 events at Beijing and Sydney. He spoke on API Management & Microservices - A Match Made in Heaven. API management delivers the processes and platforms required to implement enterprise-grade APIs but also manage the communities around it including: · Planning · Design · Implementation · Publication · Operation · Consumption · Maintenance · Retirement Whereas the Microservices architecture is an architectural style that structures an application as a set of loosely coupled, services organized around business capabilities” - Chris Richardson. Learn how Capgemini can help enhance your business using Oracle’s API & Microservices platform and processes.

More Related Content

What's hot (20)