LIBRARY

This is the second part of our article series which explores practical use cases of User-Managed Access (UMA 2.0 or UMA 2). The primary focus of this article is to discuss a UMA 2 specification known as the Federated Authorization for UMA 2. This specification standardizes interactions among the authorization server (AS), the resource server (RS), and the resource owner (RO).

Transforming a conventional business into a digital business is essential to expand the business and increase its productivity. Integrating heterogeneous systems and building an ecosystem with these integrated components are fundamental requirements in the digital transformation of enterprises. Many organizations have one or more legacy systems that provide limited support for integrating with other systems. However, it is impractical to replace all existing systems by building them from scratch.

Privacy has become a very significant global concern, not limited to any specific country or geographical area. Massive data breaches, data misuse by some large enterprises, and unauthorized surveillance have fueled large scale social movements that demand better privacy regulations and secure technologies. The General Data Protection Regulation (GDPR) in the European Union and the California Consumer Privacy Act (CCPA) are some of the best examples of modern-day privacy regulations that try to address key privacy concerns at present.