diff --git a/journal/2021-04-16--12-27-13Z--iroh_auth_presentation.org b/journal/2021-04-16--12-27-13Z--iroh_auth_presentation.org new file mode 100644 index 00000000..3b995586 --- /dev/null +++ b/journal/2021-04-16--12-27-13Z--iroh_auth_presentation.org @@ -0,0 +1,33 @@ +#+TITLE: IROH Auth Presentation +#+Author: Yann Esposito +#+Date: [2021-04-16] + +- tags :: + +* IROH Auth Intro + +Yann Esposito + +* What is IROH Auth + +A sub-system of IROH handling authentication, authorizations and +user/org/tenancy management. + + +* What is IROH + +IROH is the main API engine behind Threat Response and SecureX. + + +* History + +1. Login using AMP SAML (generate JWT) +2. OAuth2 Provider (Grants) +3. Login using OpenID Connect with TG (client of OpenID Connect) +4. Users/Orgs in DB!!! +5. Account Activation +6. Become an OpenID Connect provider +7. OIDC with SSE + +* Internal User Structure +* Cisco specificity