Solving Identity Management in Modern Applications: Demystifying OAuth 2, OpenID Connect, and SAML 2

This book provides an overview of identity management and its importance in protecting applications and data. It covers account provisioning, authentication, authorization, troubleshooting, and common problems. The updated edition includes an overview of OAuth 2.1, a new section on device authorization grants, and minor additions on identity proofing, consent information, tracking prevention technology, and authorization requests. It is designed for developers, enterprise or application architects, business application or product owners, and anyone involved in an application's identity management solution.

Format: Paperback / softback
Length: 384 pages
Publication date: 18 November 2022
Publisher: APress

At a time when security breaches result in increasingly onerous penalties, it is paramount that application developers and owners understand identity management and the value it provides when building applications. This book takes you from account provisioning to authentication to authorization, and covers troubleshooting and common problems to avoid. The authors include predictions about why this will be even more important in the future. Application best practices with coding samples are provided.

Solving Identity and Access Management in Modern Applications gives you what you need to design identity and access management for your applications and to describe it to stakeholders with confidence. You will be able to explain account creation, session and access management, account termination, and more. This expanded edition has been revised to provide an overview of the new version of OAuth (2.1)―the primary changes in this version, including features that were removed from 2.1 that were in 2.0 and why they were removed. The discussion of the book's accompanying sample application has been revised to cover in more depth the approach for developing the application (also revised). A new section has been added on the OAuth 2.0 Device Authorization Grant (RFC 8628) specification, which is useful for devices with limited UI capability. Minor additions include the topics of identity proofing, the need to capture and organize consent information, the impact of tracking prevention technology on certain identity protocols, and the availability of additional options for authorization requests such as OAuth 2.0 Rich Authorization Requests and JWT-Secured Authorization Requests.

Weight: 780g
Dimension: 254 x 178 (mm)
ISBN-13: 9781484282601
Edition number: 2nd ed.