Identity Proxy: Microservice Security So Your Developers Don’t Have To!

Securing your APIs and web applications in today’s world is a challenge every developer faces on top of the already complex work of simply building their services. In this talk, we’ll explore how we at Vanguard have used Kong (and a few other friends!) to help shift the security requirements away from the application itself so that our developers can focus on what they’re best at: developing applications! I’ll be stepping through how we leverage a combination of Kong and some open standards to protect all of our apps and services, how this pattern can improve the overall developer experience, and how you can do the same at your organization.

Continue reading

Okta and Kong: Integrate Identity into your APIs

Okta is the leading provider for identity and access management. With the number of microservices and APIs exploding, security is a bigger challenge than ever. With Okta’s OAuth as a Service plugin, you can quickly add API Access Management to Kong Gateway. Authenticate once through Okta, enforce the token in Kong, and authorize API access quickly and securely.

At Kong Summit 2021, Okta and Kong are excited to announce how they are expanding their collaboration with identity and APIs. In this session, attendees will learn best practices for API authentication and authorization and how the next phase of our partnership will make this even easier to implement. Be sure to join us for a live demo and what we’re working on next.

Continue reading

Running Secure IoT Services at the Edge

Edge computing provides perhaps the most fertile ground we have had for truly realizing the power of the Internet of Things (IoT), but even as “edge” becomes the hot new buzzword, IoT has become (almost) commonplace — and so have security threats. In this session, we’ll look at how to get the advantages of IoT at the edge without falling into security black holes. You’ll learn:
– How edge changes Kubernetes services
– Where service mesh fits into the picture
– How to secure your devices
– Network security concerns
– Application security concerns
– How to plan for mitigation (just in case)

Continue reading

Fireside Chat: Implementing Authorization for Cloud Native Applications

Application modernization requires a plethora of different kinds of technological decisions, one of which is authorization. How do you control which actions your users can take and under what conditions?…

Continue reading

Zero Trust Security with Service Mesh

As the number of microservices increases and deployed across private and public networks, security is critical. Leveraging a Service Mesh guarantees the security of applications and services without burdening developers…

Continue reading

Secure and Govern APIs

Learn how to implement powerful new authentication and authorization scenarios with Kong and Okta. We will show you how to do sophisticated API access and API management flows with OIDC…

Continue reading