Ed-Fi ODS/API Security Concepts

The linked presentation contains information about the Ed-Fi ODS/API security concepts - authentication and authorization.

Additional resources:

• API Client Developers Guide - Authentication
• API Claim Sets & Resources
• Security Visualization Tool
• Admin App Claim Set Editor
• How To: View Security Configuration Details
• How To: Configure Claim Sets

Community resources:

• Gary Clarke:
  • This is the query I use to find all resources belonging to resource claims: https://gist.github.com/gxclarke/5d039c0ad0355324fba0ea4b9517a20f
  • Here's a spreadsheet cross-referencing claimsets with resource claims, and detailing the referenced authorizing strategies: https://docs.google.com/spreadsheets/d/1U-nQ3LwrIMfxPFoELOz-pg4SAhAGydXmv87f3lWe_oA/edit#gid=0
• Rafferty McDonald (Deactivated) : I have this script too that should resolve the auth strategy applied within a specific claimset:  https://gist.github.com/RMcD/793b8c5aa5f9058b7108f2db7978dac5