DevOps Security Archives

Deploy Cloudentity on Google Cloud Platform

Published August 10, 2022

API Security Cloud Security DevOps Security

As part of our continued support for growing API-centric organizations powered by the Google Cloud Platform (GCP), we have officially enabled deployment of the Cloudentity advanced OAuth authorization and consent management solution in GCP via Google Kubernetes Engine (GKE). Organizations utilizing GKE on GCP can now self-deploy Cloudentity using Helm Charts as the Kubernetes package...

Aligning Cloudentity Components with XACML Terminology

Published March 17, 2022

API Security Cloud Security DevOps Security General

Cloudentity is frequently asked how our components and features align with those of the legacy XACML (eXtensible Access Control Markup Language), including Policy Administration Points (PAP), Policy Decision Points (PDP), Policy Information Points (PIP), and Policy Enforcement Points (PEP). In this article, we will describe what the Cloudentity components are and how they align with...

Build a GraphQL client application to consume protected GraphQL API resources

Published February 21, 2022

API Security Cloud Identity Management DevOps Security General

This article is part 3 of our GraphQL application protection series. In this article, we will build a GraphQL client that is capable of invoking GraphQL API calls, obtain authorized access tokens from a Cloudentity authorization server and send the authorization token to underlying GraphQL services. Part 1: Externalized authorization for GraphQL using the Cloudentity...

Protecting GraphQL applications through authorization and consent

Published February 18, 2022

API Security Cloud Identity Management DevOps Security General

This article is part 2 of our GraphQL application protection series. In this article, we will build a GraphQL API server and protect its resources with externalized policies administered in the Cloudentity Authorization SaaS platform. We will also protect the GraphQL API endpoint data with a local policy enforcement/decision point for the app deployed within...

Externalized Authorization for GraphQL

Published February 15, 2022

API Security Cloud Identity Management DevOps Security General

This article is the first part of a series to explore usage of the Cloudentity authorization platform for externalized GraphQL runtime authorization along with policy based access controls for GraphQL native constructs. Modern applications require runtime and flexible authorization controls to manage the security and risk of data exposed using technologies like GraphQL to various...

Identity and Authorization At Cloud Scale

Published December 6, 2021

API Security Breaches Cloud Identity Management Cloud Security Customer Experience DevOps Security General IAM Legislation News Videos

The future has a lot to answer for. For decades we’ve been promised super-cool inventions that we still haven’t received - flying cars, jetpacks and IAM platforms that provide security, scale and manageability- all with wrapped up with 21st century automation. George Jetson’s job had two settings ("Start" & "Stop") and the computer did the...

Authorization Weighs Heavily on API Security. Try Authorization as Code.

Published May 19, 2020

API Security DevOps Security

In the virtual “… as a code” world there is no place for compromises and exceptions. Infrastructure as code has served as the catalyst for the broader “as code” approach, providing simpler ways to drive digital innovation and scale. There is one problem though: human nature and perception. Any "virtual" entity is harder to control...

OAuth at 100, 200...500k flows per second and Beyond

Published November 20, 2019

DevOps Security

OAuth and OIDC have become the center point of any API and Identity infrastructure. OAuth2 created a framework allowing every user, device, person, service and thing to support their own distributed means of delegated authorization using a combination of scopes and grants. From smart speakers to connected cars, OAuth and APIs connect everything in the...

API Security

Deploy Cloudentity on Google Cloud Platform

Aligning Cloudentity Components with XACML Terminology

Build a GraphQL client application to consume protected GraphQL API resources

Protecting GraphQL applications through authorization and consent

Externalized Authorization for GraphQL

Identity and Authorization At Cloud Scale

Authorization Weighs Heavily on API Security. Try Authorization as Code.

OAuth at 100, 200...500k flows per second and Beyond

Symcor launches Open Banking suite of services, supported by Cloudentity

Find out how we can help you with your identity and authorization journey