Year: 2025
Type: article
Abstract: This paper examines the implementation of zero trust security principles in API-based integrations within federated cloud architectures, with emphasis on enterprise financial and Human Capital Management (HCM) systems. As organizations increasingly adopt multi-cloud strategies, traditional perimeter-based security models fail to protect sensitive data flows across system boundaries. Drawing from implementation experience with Workday integrations to banking and payroll systems, we present a framework for securing API communications in federated environments. The approach encompasses robust identity verification, context-aware authorization, comprehensive encryption, continuous monitoring, and resilient integration design. Case studies demonstrate practical applications, highlighting security improvements and operational efficiencies. Recommendations for organizations transitioning toward zero trust architectures in their integration landscapes are provided.
Author: Aditya Ramaswamy
Institution: Institute of Electrical and Electronics Engineers
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: diamond
OpenAlex ID: W4412667154