OAuth Toolkit

Making OAuth Implementation Simple

OAuth is rapidly becoming the preferred authentication and authorization method for accessing Web-based resources through an API. The Layer 7 API Proxy and other SOA and Cloud Gateways support OAuth 1.0a, OAuth WRAP and OAuth 2.0 specifications and can be used to simplify both two- and three-legged OAuth implementations for authorization servers and protected resource servers. The built-in Security Token Service (STS) inside the Layer 7 API Proxy and related gateways can issue and validate security tokens of a variety of formats and structures, depending on the requirements of the specific OAuth implementation. Security tokens generated by the Layer 7 STS can be used as OAuth access tokens, optionally with HMAC or RSA signature methods, and SHA-1, SHA-256 or SHA-512 encryption.

Furthermore, in supporting SAML, the Layer 7 SecureSpan and CloudSpan Gateways can be used to enable web browser single sign-on (SSO) capabilities for integrating the enterprise with cloud-based services. A SAML assertion generated by the gateway can be used as an OAuth authorization grant to obtain an access token. 

OAuth Toolkit Demo

Download the slides from this demo

Webinar:  A Practical Guide to API Security & OAuth for the Enterprise featuring Forrester Research, Inc. 

View the OAuth 2.0 with Layer 7 Gateways tutorial series on YouTube