SPIFFE Meets OAuth: Federated Identity for Cloud Native Workloads - Yoshiyuki Tabata, Hitachi, Ltd.

This talk covers the integration of federated identity patterns for cloud-native workloads presented by Yoshiyuki Tabata from Hitachi, Ltd. Addressing the complexities of operating across multiple trust domains, the session explores how combining SPIFFE and OAuth extensions can enhance secure identity propagation and authorization in dynamic Kubernetes environments. The speaker demonstrates the use of SPIFFE JWT SVID and OAuth Identity Chaining, along with Assertion Framework standards, to facilitate multi-hop authorization. Attendees will receive practical insights through a live demo that incorporates Keycloak, SPIRE, and OAuth flows, illustrating the benefits of improved interoperability and security in multi-cluster Kubernetes setups.