Microservice architecture for identity and access management

A method for identity and access management, the method comprising:

• deploying a plurality of interconnected microservices and a plurality of microgateway sidecars, each of the microservices associated with one of the microgateway sidecars;
• managing, via one of the microgateway sidecars, access to the associated microservice, wherein managing access to the associated microservice includes:
• intercepting, via the associated microgateway sidecar, a request for the associated microservice sent over a communication network from a user device, wherein the request includes data regarding a user context of the request and an enriched token, wherein the token is enriched based on the user context data associated with profile information of a user of the user device,
• signing the enriched token via the microgateway sidecar using a private key associated with the associated microservice, and
• sending the signed token to at least one other microservice, wherein the at least one other microservice verifies that the signed token is valid and is from the associated microservice based on the signature by the microgateway sidecar;
• accessing a database of security policies for each of the microservices;
• generating, via authorization engine, a risk profile for the request based on the user context data of the request and one or more of the security policies in the database;
• and
• selecting one of a plurality of available security workflows based on the risk profile, wherein the selected security workflow includes sending one or more verification communications to the user device.

A non-transitory computer-readable storage medium, having embodied thereon instructions executable by a processor to perform a method for identity and access management, the method comprising:

• deploying a plurality of interconnected microservices and a plurality of microgateway sidecars, each of the microservices associated with one of the microgateway sidecars;
• managing, via one of the microgateway sidecars, access to the associated microservice, wherein managing access to the associated microservice includes:
• intercepting, via the associated microgateway sidecar, a request for the associated microservice sent over a communication network from a user device, wherein the request includes data regarding a user context of the request and an enriched token, wherein the token is enriched based on the user context data associated with profile information of a user of the user device,
• signing the enriched token via the microgateway sidecar using a private key associated with at least one other microservice, and
• sending the signed token to the at least one other microservice, wherein the at least one other microservice verifies that the token is valid and from the associated microservice based on the signature by the microgateway sidecar;
• accessing a database of security policies for each of the microservices;
• generating, via an authorization engine, a risk profile for the request based on the user context data of the request and one or more of the security policies in the database;
• and
• selecting one of a plurality of available security workflows based on the risk profile, wherein the selected security workflow includes sending one or more verification communications to the user device.