Solving Identity Management in Modern Applications: Demystifying Oauth 2, Openid Connect, and Saml 2

Know how to design and use identity management to protect your application and the data it manages.

At a time when security breaches result in increasingly onerous penalties, it is paramount that application developers and owners understand identity management and the value it provides when building applications. This book takes you from account provisioning to authentication to authorization, and covers troubleshooting and common problems to avoid. The authors include predictions about why this will be even more important in the future. Application best practices with coding samples are provided.

Solving Identity and Access Management in Modern Applications gives you what you need to design identity and access management for your applications and to describe it to stakeholders with confidence. You will be able to explain account creation, session and access management, account termination, and more.

This revised and expanded edition includes additional content providing an overview of the new version of OAuth (2.1)--what led to it, and primary changes in this version (including features removed from 2.1 that were in 2.0 and why they were removed)--as well as coverage of newer specification documents (RFC 8639--Device flow, useful for IoT devices, RFC 8705--mutual Transport Layer Security, RFC 8707--the protocol "resource" parameter, it's purpose and use, and more).

What You'll Learn

• Understand key identity management concepts
  
• Incorporate essential design principles
  
• Design authentication and access control for a modern application
  
• Know the identity management frameworks and protocols used today (OIDC/OAuth 2.0/2.1, SAML 2.0)
  
• Review historical failures and know how to avoid them

Who This Book Is For

Developers, enterprise or application architects, business application or product owners, and anyone involved in an application's identity management solution