Protecting a REST API

Course Overview

Integrating Applications With IG
0%
Configuring Agentless Single Sign-On
0%
Controlling Access with IG as Policy Enforcement Point
0%
Protecting a REST API
0%
- Student Guide
- Workbook
- Virtual Exercise Environment
- Configuring IG as OAuth2 Resource Server
- OAuth2 Resource Server Filter
  0%
- List Access Token Resolvers
  0%
- Validate Certificate-Bound Access Tokens
  0%
- Observe Flow With Token Introspection Resolver
  0%
- Demo: Configure Route With OAuth2 Authorization
  0%
- Lab: Configure IG to Protect FEC REST APIs
- Lab: Examine REST API Solution (Optional)
- Demo: Examine OAuth2 Provider and Client Profile Configuration
- Lab: Prepare OAuth2 Solution to Protect FEC REST API
- Extending Functionality With Scripts
- Scripting Functionality for Extending IG
  0%
- Explore Scriptable Objects
  0%
- Demo: Modify Route With Scriptable Filter
  0%
- Lab: Configure Scriptable Filter to Log Content of OAuth2 Context
- Examine Dynamic Scopes Solution
  0%
- Demo: Create and Use Script to Implement Dynamic Scopes
  0%
- Lab: Configure Dynamic Scopes Script
- Lab: Configure Scriptable Filter to Retrieve Favorite List
- OAuth2 Token Swapping
  0%
Preparing for Production with IG
0%

Protect a REST API with IG and extend IG functionality with scripting.

Not yet accessed

Student Guide

Protecting a REST API

This student guide contains your slides and instructor notes.

Access with a Pass

Not yet accessed

Workbook

Protecting a REST API

Your workbook contains all your exercise instructions and should be used together with your exercise environment.

Access with a Pass

Not yet accessed

Virtual Exercise Environment

Protecting a REST API

This brings you to your virtual exercise environment where you can complete your exercises using your workbook. Your lab exercises are chapter-based.

Access with a Pass

Configuring IG as OAuth2 Resource Server

OAuth2 Resource Server Filter

Review OAuth2 players and the role of the resource server, which can be configured in IG as an ...

oauth2 rest apis filter

List Access Token Resolvers

List the types of access token resolvers and describe their configuration and use.

access cloud identity oauth2 token (1 more)

Validate Certificate-Bound Access Tokens

Describe the ConfirmationKeyVerifierAccessTokenResolver and how it can be used to validate ...

access cloud identity token am Oauth3

Observe Flow With Token Introspection Resolver

Observe the flow with the TokenIntrospectionAccessTokenResolver.

access token authorization rest filter

Demo: Configure Route With OAuth2 Authorization

Demonstrate how to configure a route with OAuth2 authorization to protect access to the FEC REST ...

oauth2 rest

Access with a Pass

Lab: Configure IG to Protect FEC REST APIs

Protect the REST APIs of the FEC website by using access tokens.

am lab exercise rest token

Access with a Pass

Lab: Examine REST API Solution (Optional)

Add log capture configuration to the 500_api route to examine the log messages generated when a ...

lab exercise api logs

Access with a Pass

Demo: Examine OAuth2 Provider and Client Profile Configuration

Demonstrate how Identity Cloud (or AM) supports OAuth2/OIDC applications by examining the OAuth2 ...

am lab exercise oidc identity cloud OAuth2

Access with a Pass

Lab: Prepare OAuth2 Solution to Protect FEC REST API

Keep security out of the backend application code that exposes the REST APIs so that it does not ...

am lab exercise identity cloud rest OAuth2

Extending Functionality With Scripts

Scripting Functionality for Extending IG

Describe the scripting framework for extending IG functionality.

Object types extending ig scriptable

Explore Scriptable Objects

List the objects available to a script, and describe the ScriptableHandler, the ScriptableFilter, ...

filter ig scriptable object types handler

Demo: Modify Route With Scriptable Filter

Demonstrate how to use a scriptable filter to log information about the OAuth2 context data.

filter OAuth2 chain

Access with a Pass

Lab: Configure Scriptable Filter to Log Content of OAuth2 Context

Configure a scriptable filter to log the content of the OAuth2 context

oauth2 lab exercise chain filter

Examine Dynamic Scopes Solution

Examine how to implement a solution for dynamic scopes.

dynamic scopes filter

Demo: Create and Use Script to Implement Dynamic Scopes

Demonstrate how to modify a route's OAuth2 authorization configuration that uses a script to ...

oauth2 dynamic scopes

Access with a Pass

Lab: Configure Dynamic Scopes Script

Configure dynamic scopes in IG by creating a script that requests different scopes for different ...

dynamic scopes lab exercise api

Access with a Pass

Lab: Configure Scriptable Filter to Retrieve Favorite List

Create a scripted solution that retrieves the favorite list of the user who is the subject in the ...

filter access tokens lab exercise OAuth2 log

OAuth2 Token Swapping

Describe how to implement OAuth2 token swapping in IG.

oauth2 saml token swapping oidc IG (1 more)

Next chapter: Preparing for Production with IG