One Auth to Rule them All: Centralizing Authentication with Azure and API Gateway by F.Karailanidis

In our company, we faced the recurring issue of each application implementing its own authentication. To streamline this process and enhance our security control, we decided to centralize the authentication for our internal applications. This talk will guide you through our journey, showcasing the most intriguing and challenging moments (did you know not all JWTs are the same?). We’ll demonstrate how we leveraged Azure for SSO and integrated AWS API Gateway with a custom Lambda Authorizer for our solution. We'll also talk about the fun part of convincing every developer in the company to use this one approach!