Authentication

This section provides an overview on authentication.

API Gateway and Temenos API Framework help you to authenticate client requests and access secure microservices APIs. The interaction framework (IRIS R18) provides the support for implementing JWT-based authentication for the requests serviced.

• In the case of on-premise deployment, the client application provides JWT token, which helps to validate the security claims and allows only validated requests to forward the requests to microservices.
• In the case of cloud deployment, API Gateway infrastructure service secures the microservice APIs.

XACML based Authorization

This section explains the authentication based on Extensible Access Control Markup Language (XACML), which is an open standard XML-based language designed to configure security policies and access rights to information for web services.