Hybrid cloud architectures and modern, containerised applications are pushing established IAM and security models to their limits. In increasingly distributed and dynamic infrastructures, not only human users but also non-human identities such as services, APIs and automated workloads must be securely authenticated and authorised.

In this presentation, we will show how token exchange, as a central IAM principle, helps to establish chains of trust between distributed components and implement context-based access control – without having to maintain or exchange central identity data multiple times.
Using real-world architectural approaches and a live demo of OpenID Connect (OIDC), we will show how access tokens can be transformed for specific services and contexts, such as fine ...