Ed-Fi ODS/API Security Concepts

The linked presentation contains information about the Ed-Fi ODS/API security concepts - authentication and authorization.

Open

Additional resources:

• API Client Developers Guide - Authentication

• API Claim Sets & Resources

• Security Visualization Tool

• Admin App Claim Set Editor

• How To: View Security Configuration Details

• How To: Configure Claim Sets

Community resources:

• @Gary Clarke:

  • This is the query I use to find all resources belonging to resource claims: https://gist.github.com/gxclarke/5d039c0ad0355324fba0ea4b9517a20f

  • Here's a spreadsheet cross-referencing claimsets with resource claims, and detailing the referenced authorizing strategies: https://docs.google.com/spreadsheets/d/1U-nQ3LwrIMfxPFoELOz-pg4SAhAGydXmv87f3lWe_oA/edit#gid=0

• @Rafferty McDonald (Deactivated) : I have this script too that should resolve the auth strategy applied within a specific claimset:  https://gist.github.com/RMcD/793b8c5aa5f9058b7108f2db7978dac5