{"id":"https://openalex.org/W4409439807","doi":"https://doi.org/10.63397/iscsitr-ijca_03_01_001","title":"Enhancing API Security in Guidewire PolicyCenter Cloud: Zero Trust with OAuth 2.0, JWT, Keycloak & OpenID Connect","display_name":"Enhancing API Security in Guidewire PolicyCenter Cloud: Zero Trust with OAuth 2.0, JWT, Keycloak & OpenID Connect","publication_year":2022,"publication_date":"2022-03-05","ids":{"openalex":"https://openalex.org/W4409439807","doi":"https://doi.org/10.63397/iscsitr-ijca_03_01_001"},"language":"en","primary_location":{"id":"doi:10.63397/iscsitr-ijca_03_01_001","doi":"https://doi.org/10.63397/iscsitr-ijca_03_01_001","is_oa":true,"landing_page_url":"https://doi.org/10.63397/iscsitr-ijca_03_01_001","pdf_url":"https://iscsitr.com/articles/volume_3/issue_1/ISCSITR-IJCA_03_01_001","source":null,"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ISCSITR-INTERNATIONAL JOURNAL OF COMPUTER APPLICATIONS","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://iscsitr.com/articles/volume_3/issue_1/ISCSITR-IJCA_03_01_001","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5117070926","display_name":"Shanmugasundaram Senathipathi","orcid":"https://orcid.org/0009-0001-5853-9522","observed_orcids":["https://orcid.org/0009-0001-5853-9522"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Shanmugasundaram Senathipathi","raw_affiliation_strings":["Manager , Capgemini, Financial Services , Woodland Hills , California , United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Manager , Capgemini, Financial Services , Woodland Hills , California , United States","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5117070926"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"3","issue":"1","first_page":"1","last_page":"22"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.46560001373291016,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.46560001373291016,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.24459999799728394,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.15410000085830688,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/api-security","display_name":"API security","score":0.9980000257492065},{"id":"https://openalex.org/keywords/zero-trust-architecture","display_name":"zero-trust architecture","score":0.7179999947547913},{"id":"https://openalex.org/keywords/oauth-2-0","display_name":"OAuth 2.0","score":1.0},{"id":"https://openalex.org/keywords/json-web-tokens","display_name":"JSON Web Tokens","score":0.9449999928474426},{"id":"https://openalex.org/keywords/keycloak","display_name":"Keycloak","score":0.9980000257492065},{"id":"https://openalex.org/keywords/openid-connect","display_name":"OpenID Connect","score":1.0},{"id":"https://openalex.org/keywords/token-based-authentication","display_name":"token-based authentication","score":0.8270000219345093},{"id":"https://openalex.org/keywords/access-control","display_name":"access control","score":0.8299999833106995},{"id":"https://openalex.org/keywords/insurance-software","display_name":"insurance software","score":0.47200000286102295},{"id":"https://openalex.org/keywords/cloud-native-security","display_name":"cloud-native security","score":0.671999990940094}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5674116015434265},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5578286051750183},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.54739910364151},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3838447332382202},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.34983354806900024},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1988416314125061}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.63397/iscsitr-ijca_03_01_001","doi":"https://doi.org/10.63397/iscsitr-ijca_03_01_001","is_oa":true,"landing_page_url":"https://doi.org/10.63397/iscsitr-ijca_03_01_001","pdf_url":"https://iscsitr.com/articles/volume_3/issue_1/ISCSITR-IJCA_03_01_001","source":null,"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ISCSITR-INTERNATIONAL JOURNAL OF COMPUTER APPLICATIONS","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.63397/iscsitr-ijca_03_01_001","doi":"https://doi.org/10.63397/iscsitr-ijca_03_01_001","is_oa":true,"landing_page_url":"https://doi.org/10.63397/iscsitr-ijca_03_01_001","pdf_url":"https://iscsitr.com/articles/volume_3/issue_1/ISCSITR-IJCA_03_01_001","source":null,"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ISCSITR-INTERNATIONAL JOURNAL OF COMPUTER APPLICATIONS","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4409439807.pdf","grobid_xml":"https://content.openalex.org/works/W4409439807.grobid-xml"},"referenced_works_count":4,"referenced_works":["https://openalex.org/W3116169147","https://openalex.org/W3160370961","https://openalex.org/W3168964446","https://openalex.org/W3172053354"],"related_works":["https://openalex.org/W4408779276","https://openalex.org/W7084756214","https://openalex.org/W6930962162","https://openalex.org/W7137828557","https://openalex.org/W7117874098","https://openalex.org/W7140317789","https://openalex.org/W7104645819","https://openalex.org/W4407447155","https://openalex.org/W7166322311","https://openalex.org/W7154989326"],"abstract_inverted_index":{"With":[0],"the":[1,70],"increasing":[2],"adoption":[3],"of":[4,66,73,80],"cloud-based":[5],"insurance":[6],"platforms,":[7],"securing":[8],"APIs":[9],"in":[10,23],"Guidewire":[11,41],"PolicyCenter":[12,42,127],"has":[13],"become":[14],"a":[15,30,77,119],"critical":[16],"concern.Traditional":[17],"perimeter-based":[18],"security":[19,38,71,121],"models":[20],"are":[21],"inadequate":[22],"protecting":[24],"against":[25],"sophisticated":[26],"cyber":[27],"threats,":[28],"necessitating":[29],"Zero":[31,94],"Trust":[32,95],"approach.This":[33],"research":[34],"presents":[35],"an":[36],"API":[37,67,104,115],"framework":[39,57],"for":[40,123],"Cloud,":[43],"leveraging":[44],"OAuth":[45,98],"2.0,":[46],"JSON":[47],"Web":[48],"Tokens":[49],"(JWT),":[50],"Keycloak,":[51],"and":[52,63,87,100,114,134],"OpenID":[53],"Connect":[54],"(OIDC).The":[55],"proposed":[56],"enforces":[58],"strong":[59],"authentication,":[60],"fine-grained":[61],"authorization,":[62],"continuous":[64],"verification":[65],"requests.We":[68],"evaluate":[69],"effectiveness":[72],"this":[74],"approach":[75],"through":[76],"comparative":[78],"analysis":[79],"access":[81],"control":[82],"mechanisms,":[83],"token-based":[84],"authentication":[85],"methods,":[86],"threat":[88],"mitigation":[89],"strategies.Findings":[90],"demonstrate":[91],"that":[92],"integrating":[93],"principles":[96],"with":[97,131],"2.0":[99],"OIDC":[101],"significantly":[102],"enhances":[103],"security,":[105],"reducing":[106],"risks":[107],"such":[108],"as":[109],"unauthorized":[110],"access,":[111],"token":[112],"leakage,":[113],"abuse.This":[116],"study":[117],"provides":[118],"robust":[120],"model":[122],"insurers":[124],"adopting":[125],"cloud-native":[126],"deployments,":[128],"ensuring":[129],"compliance":[130],"industry":[132],"standards":[133],"regulatory":[135],"requirements.":[136]},"counts_by_year":[],"updated_date":"2026-09-26T08:19:03.415552","created_date":"2025-04-15T00:00:00"}