Use cases
Connect the concepts to everyday scenarios: onboarding, urgent offboarding, partners, pipelines, and workloads.
7 articlesStart with the foundationsOnboarding an employee
Walk a new employee from an approved people record to verified application access.
Giving a workload access to an API
Apply identity, ownership, and least privilege to software acting without a person.
Offboarding a leaver urgently
Remove all access for a departing person immediately and prove that it worked.
Deploying from CI/CD without stored secrets
Use workload identity federation so a pipeline receives short-lived cloud access instead of a long-lived key.
Giving a partner organization access
Let a supplier's employees use your application through federation, with sponsorship, scope, and an end date.
Authorizing a single payment with PAR, RAR, and DPoP
Combine pushed requests, rich authorization details, strong client authentication, and sender-constrained tokens for a high-value transaction.
Connecting an AI agent to a protected API (MCP)
How an AI agent discovers, authorizes, and calls a protected tool server with OAuth, Protected Resource Metadata, and audience-bound tokens.