Claims & Scopes
Learn how claims and scopes can be used for standards-based authorization.
Articles
Vectors of Trust
Vectors of Trust is a specification that provides a method for describing an identity transaction to determine a level of trust.
Implementing Claims Best Practices
Using the Curity Identity Server to issue custom claims
Claims Best Practices
Best practices for issuing and managing claims to ensure secure API authorization.
Scope Best Practices
Best practices for designing OAuth scopes in real world systems and managing them at scale.
Consent and Claims
Learn how consent relates to claims in the authorization process.
Default Scopes
Discover how to use the default scope with a set of default claims.
The Claims Authority
A brief overview of what a claims authority is and what role it plays in the process of issuing claims.
Introduction to Scopes
Learn what scopes are, their role in authorization, and how to handle them properly.
Using Claims in APIs
Learn how to create a claims-based architecture for APIs and microservices.
Claims Explained
This article provides a comprehensive overview of the claims ontology. Scopes, claims, tokens and how they are related.
Centralizing Identity Data
How the claims infrastructure can be used to centralize the identity data.
Scopes, Claims and the Client
An overview of different aspects of claims and scopes from a client perspective.
Introduction to Claims
Learn about claims: what they are, and how they are used in the authentication process.
Scopes vs Claims
A short explanation of the differences between scopes and claims.
Videos
A claim is statement that a particular entity has a particular property. In authentication, we usually think of claims as assertions about a user, as asserted by the Identity Provider. Claims are critical to reach the highest level in the API Security Maturity model. When designing a token-based architecture, it's important to understand how identity data is passed around. Claims provide a fundamental means for how to trust that the data is valid and true. A scope is a grouping of claims. In OAuth, a scope is defined as a string that may represent a resource the Client requests access to. The Scope is what gives access to APIs (with a valid token). But Scopes are also what gives access to claims.