News & Events

Forum Systems to Host Industry Leaders at API Summit

Event Highlights Summit to be led by Forum Systems CEO and CTO, joined by top technology executives from financial services firms including OmegaFi. Real-world customer examples and interactive discussions will expand knowledge of best practices for implementing and managing third-party … Read More … Read More

API Identity Management with LDAP Server

Most corporations deploy LDAP severs such as OpenLDAP to store identities used for SSO and API identity management.   Application users authenticate against these LDAP servers to gain access to APIs.  To avoid an intrusive, non-scalable agent-based model — where … Read More … Read More

Tags: ,

Introduction to OAuth

OAuth is an open standard for authorizing access to specific applications and data within a server on behalf of the application owner.  The basic model of authentication between a client and an application has evolved to keep up with the demands … Read More … Read More

Tags: ,

Infinite cloud storage scale-out with enterprise IdMs

Public cloud storage providers such as Amazon S3, Google Cloud Storage, and Rackspace Cloud Files provide practically infinite storage capacity for enterprise data center. A secure scale-out for corporate data storage to public cloud providers requires traversing the public-private cloud boundary. … Read More

Tags:

Using HTTP Basic Auth for API Identity Management

APIs are proliferating corporate networks. Business owners seek APIs that solve their requirements regardless of whether the APIs are homegrown or provided by 3rd parties. For both cases — internal and external APIs — controls have to be enforced on who gets to use what API. This level of API control requires enabling Identity Management for APIs. … Read More

Tags: ,

Users, Groups and ACLs for API Identity Management

Identity management is the cornerstone for building a secure infrastructure that uses internal and 3rd party APIs. By defining users, groups, and access control lists (ACLs), companies can granularly control who gets to use what API-based resource. In this tutorial, we will configure users, groups and ACLs on Forum Sentry API Gateway for authenticating users and authorizing API access. … Read More

FAQ: Triggering the “Invalid HTTP Message” IDP Rule in Forum Sentry

A request or response message might trigger the “Invalid HTTP Message” IDP rule in Sentry resulting in the “No Matching Request Filter” error. This is a very common support issue that is easily identified and resolved. To resolve the problem, … Read More … Read More

Protecting your API Listener through SSL

In this tutorial, you will learn how to rapidly protect your corporate APIs by providing a centralized SSL policy for your service. We will use three components for this tutorial: (i) TempConvert – a publicly available service that will be the corporate service that you plan to protect through SSL (ii) Forum Sentry to enable centralized API security via an SSL policy (iii) SOAPSonar used as a testing tool. … Read More

Sleep Better with Centralized API Security

Secure integration has become increasingly important over the past few years. As businesses rely more heavily on applications for conducting transactions and managing personal information, API security has become critically important. When it comes to application security, generally, there are … Read More … Read More

Tags: ,

Signer Groups and CRLs for API Security

In this tutorial, we will show how to enable and manage Signer Groups and CRLs rapidly for establishing APIs security using Forum Sentry API Gateway. … Read More

Tags: