Slides from EIC 2018

1. Authorization for the IoT:
The OAuth Device Flow
Scott Brady – Rock Solid Knowledge
@scottbrady91 – Rock Solid Knowledge

2. Introductions
• Background in OAuth, OpenID Connect, SAML, & WS-Federation
• Identity & Access Control Lead at Rock Solid Knowledge
@scottbrady91 – Rock Solid Knowledge

3. The Problem
• Browserless devices
• Input constrained devices
@scottbrady91 – Rock Solid Knowledge

4. Browserless Devices
• Smart TVs
• Printers
• Fridges (IoT)
• Sensors
@scottbrady91 – Rock Solid Knowledge

5. Input Constrained Devices
Pictures from Unsplash
@scottbrady91 – Rock Solid Knowledge

6. The OAuth Device Flow
• Nearly all of us have a browser in our pocket
• Benefits:
• No more impersonation (credential sharing)
• Single Sign On
• Password Managers
@scottbrady91 – Rock Solid Knowledge

7. Demo!
@scottbrady91 – Rock Solid Knowledge

8. Use Cases
• Public printers
• Bringing strong authentication to native devices
@scottbrady91 – Rock Solid Knowledge

9. Thanks!
@scottbrady91
www.identityserver.com