Enhancing API Security in Guidewire PolicyCenter Cloud: Zero Trust with OAuth 2.0, JWT, Keycloak & OpenID Connect
Year: 2022
Type: article
Abstract: With the increasing adoption of cloud-based insurance platforms, securing APIs in Guidewire PolicyCenter has become a critical concern.Traditional perimeter-based security models are inadequate in protecting against sophisticated cyber threats, necessitating a Zero Trust approach.This research presents an API security framework for Guidewire PolicyCenter Cloud, leveraging OAuth 2.0, JSON Web Tokens (JWT), Keycloak, and OpenID Connect (OIDC).The proposed framework enforces strong authentication, fine-grained authorization, and continuous verification of API requests.We evaluate the security effectiveness of this approach through a comparative analysis of access control mechanisms, token-based authentication methods, and threat mitigation strategies.Findings demonstrate that integrating Zero Trust principles with OAuth 2.0 and OIDC significantly enhances API security, reducing risks such as unauthorized access, token leakage, and API abuse.This study provides a robust security model for insurers adopting cloud-native PolicyCenter deployments, ensuring compliance with industry standards and regulatory requirements.
Author: Shanmugasundaram Senathipathi
Language: English
Topic: Access Control and Trust
Subfield: Computer Networks and Communications
Field: Computer Science
Domain: Physical Sciences
Open Access status: gold
OpenAlex ID: W4409439807