This lab demonstrates the use case for securing a Open Banking transaction initiated by a PSU (Payment Service User) by logging into the TPP (Third Party App).

The intended goal of this lab is to enable security administrators to configure and test F5 SSL Orchestrator and showcase how to dynamically orchestrate security infrastructure.

Welcome to WWT's F5 APM Identify and Access management sandbox. This capability is a fully functioning sandbox that demonstrates how F5 APM can be used to achieve various levels of access control within an enterprise, such as Single Sign-On and VPN.

This lab will provide the user with a good understanding on how to automate the management of software for BIG-IP leveraging BIG-IQ Central Management as a platform.

The purpose of this lab is to demo how NGINX Controller API Management Module and NGINX App Protect can secure the OAuth Authorization Code flow, which is core to Open Banking specifications. The NGINX App Protect will be deployed as an Ingress Controller for Kubernetes and will provide both negative and positive security by ingesting the OpenAPI declaration file. The NGINX API Gateway will be controlled by NGINX Controller, will publish the application API based on the same OpenAPI declaration file, will provide JWT authentication and authorization and enforce rate limiting. The deployment and configuration of these elements will be performed automatically through a CI/CD pipeline. ELK dashboards will be used for visualization purposes and, lastly, a DAST tool will also be run as part of the CI/CD pipeline. BIG-IP APM is deployed as both Authorization Server with OpenID Connect support and as OAuth Client, in separate instances.