API security

Delegated Access

Delegated access is the model in which a user or system authorizes an application to act on its behalf within a controlled perimeter.

Definition

Delegated access is the principle by which an application receives a bounded right to call a resource or API for a given user, service, or technical subject. The delegation is constrained by explicit authorization decisions such as scope, audience, duration, and policy.

The Ariovis perspective

API security should keep authentication, token issuance, authorization and secret management distinct. Each control has a different role and must be designed around the actual caller and resource.

These concepts matter most inside a real project.

The first conversation helps establish your context, the systems involved and the next useful decision.