Skip to main content

← Back to glossary

Term · 21. Integration & APIs

Application Programming Interface API

IDM/IGA Domain

Definition

Defined interface allowing software components to interact — increasingly the primary integration mechanism for cloud-native identity. Modern APIs: REST (state representation), GraphQL (query-driven), gRPC (high-performance), event-driven (webhooks). Identity-specific: SCIM, OIDC, SAML federation.

Synonyms
  • API
Application
MidPoint: Set of procedures, functions or methods that can be used by another program or component.
Standards & regulations
  • OASIS PKCS#11 Base Specification v2.40 «The PKCS#11 standard specifies an application programming interface (API), called ‘Cryptoki,’ for devices that hold cryptographic information and perform cryptographic functions.»
  • W3C Web Authentication: An API for accessing Public Key Credentials Level 2 «This specification defines an API enabling the creation and use of strong, attested, scoped, public key-based credentials by web applications.»
  • FIDO UAF Application API and Transport Binding Specification v1.2 «This document describes the API surface that a client application can use to communicate with FIDO UAF Client software, and transport patterns by which the FIDO UAF Client can talk to a FIDO UAF Authe»
  • OASIS Customer Data Platform Version 1.0 «The CDP standard is defined as a web-based API using GraphQL - providing a self-documented and strongly typed interface.»