Cloud Zone is brought to you in partnership with:

Mark O'Neill is CTO of Vordel, an Axway company. He is the author of the McGraw-Hill book "Web Services Security" and is frequent speaker at conferences including Java One, the RSA Security Conference, and Oracle Open World. Mark is based on Boston, Massachusetts. Mark is a DZone MVB and is not an employee of DZone and has posted 43 posts at DZone. You can read more from them at their website. View Full User Profile

OpenID for API Management at the API Portal

07.12.2012
| 1390 views |
  • submit to reddit
Next week I am at the Cloud Identity Summit (CIS) in Colorado. Vordel is a sponsor at CIS, and I'm looking forward to what promises to be an excellent event. Two of the hot topics there are API Management and OpenID. I'm speaking on a panel about API Management on the Thursday of the event. There are also OpenID events on the first two days of the event. 
So, I've put the two things together - OpenID and API Management - in this API Portal demo below. I've used a cookie-cutter "Acme Inc" API Portal to show how (a) a developer registers their API on the API Portal, and (b) how OpenID is used at runtime. I'm using OpenID against Google in order to show it in action, but the Google login part would not (of course) be required if the client is already logged into Google (e.g. an Android phone app).



    
Published at DZone with permission of Mark O'neill, author and DZone MVB. (source)

(Note: Opinions expressed in this article and its replies are the opinions of their respective authors and not those of DZone, Inc.)