OAuth 2.0 is an authorisation framework that lets an application act on a user's behalf without their password. It issues limited, revocable tokens tied to specific scopes.
Identity and access management (IAM) is the set of policies and systems that control who or what can access which resources. It spans login, roles, permission reviews and offboarding.
Multi-factor authentication (MFA) is a login method that requires two or more independent proofs of identity. A typical pairing is a password plus an authenticator app, passkey or hardware key.
A REST API is a web interface that exposes resources at URLs and uses standard HTTP methods to read and change them. GET, POST, PUT and DELETE map to reading, creating, replacing and removing data.
Single sign-on (SSO) lets users sign in once with a central identity provider and then reach many applications. Each app trusts the provider instead of keeping its own password.
API security is the practice of protecting application programming interfaces from misuse. It controls who can call them, what data they can reach and how much they can request.
A clear proven process, that delivers
You've seen our ideas - now go deeper.
Discover more insights, guides, and engineering practice.