Term · 21. Integration & APIs
Application Programming Interface API
Definition
Defined interface allowing software components to interact — increasingly the primary integration mechanism for cloud-native identity. Modern APIs: REST (state representation), GraphQL (query-driven), gRPC (high-performance), event-driven (webhooks). Identity-specific: SCIM, OIDC, SAML federation.
- Synonyms
-
- API
- Application
- MidPoint: Set of procedures, functions or methods that can be used by another program or component.
- Standards & regulations
-
- OASIS PKCS#11 Base Specification v2.40 «The PKCS#11 standard specifies an application programming interface (API), called ‘Cryptoki,’ for devices that hold cryptographic information and perform cryptographic functions.»
- W3C Web Authentication: An API for accessing Public Key Credentials Level 2 «This specification defines an API enabling the creation and use of strong, attested, scoped, public key-based credentials by web applications.»
- FIDO UAF Application API and Transport Binding Specification v1.2 «This document describes the API surface that a client application can use to communicate with FIDO UAF Client software, and transport patterns by which the FIDO UAF Client can talk to a FIDO UAF Authe»
- OASIS Customer Data Platform Version 1.0 «The CDP standard is defined as a web-based API using GraphQL - providing a self-documented and strongly typed interface.»
Related terms
-
Active Directory (AD)
Microsoft's enterprise directory service (since Windows 2000 Server) — central repository for user accounts, computer ac …
-
AuthZEN
OpenID Foundation working group standardising a uniform API for authorization decisions across heterogeneous Policy Deci …
-
DPoP (Demonstration of Proof of Possession) (DPoP)
Demonstration of Proof-of-Possession — IETF RFC 9449, OAuth 2.0 mechanism binding an access token to a private key held …
-
FAPI 2.0 (Financial-grade API) (FAPI 2.0)
OpenID Foundation Financial-grade API Security Profile 2.0 — high-security authorization profile for financial APIs (ope …
-
Kerberos
Network authentication protocol developed at MIT (Kerberos v5: IETF RFC 4120, 2005) using symmetric-key cryptography and …
-
LDAP (LDAP)
Lightweight Directory Access Protocol (RFC 4511) — TCP/IP protocol for accessing directory services. Foundation of enter …