Learn the Basics
provide practical overview of iam client or digital service providers often need to access resources to function authorization is how we control access to resources authorization processes identify and authenticate the client, determine if the request should be allowed, and provide the client with unique access information key concept resource a resource is a digital content that can be served over the web resources come in many form a simple resource might be a text file, image, or video a more complex resource might be interactive web pages or full service apis with many paths and actions one base resource that is often needed is a person's profile or userinfo a group of attributes that are unique to the user and allow a service provide to provide personalized user experiences in an authorization ecosystem, there are three main players the client accesses resources to provide a valuable service the authorization service controls access by making authorization decisions resource service holds and provides resources at some web location insert diagram to achieve these flows, our solution supports authorization frameworks and standards oauth & saml often the client is providing their service to a person (aka user/end user), and needs to access resources specific to that person in this scenario, the person often needs to participate to achieve user present flows, our solution supports additional technical standards oidc, uma