Research from F5 Labs found that API security incidents in the first half of 2020 exceeded the number of incidents from the previous two years combined. A significant challenge facing DevOps teams is that there are many areas of weakness around API security, especially around authentication in front of API endpoints, broken authentication, and broken authorization. Having the right identity and access management (IAM) solution is one thing, configuring and deploying it properly is, obviously, crucial. In this episode, we will show how NGINX interacts with Okta, one of the leading IAM solutions in the market.
Key Takeaways:
- Demonstrate OAuth 2.0 JWT validation with Okta (with PKCE)
- Demonstrate rate-limiting configuration per user
- Demonstrate authorization based on group claim information
- Okta specific feature that works with NGINX Plus