Strengthen security for access tokens
Also listed as: Enhanced token security
What is it?
Xelence will tighten how access tokens, the digital keys that let systems call each other, are issued, checked and stored, including checking with the issuer that a token is still valid.
Why does it matter?
A stolen or outdated token could let someone call an API they should not, so tokens need closer control.
Stronger protection for connected systems and the data they exchange.
Getting it into your solution
- Needs an upgrade to the Xelence release
- Needs configuration
Start thinking about
- Which outside systems call Xelence APIs today, and how are their tokens managed?
- How often does your security policy require credentials to be rotated?
- When would a move to Xelence 10.0 fit your release calendar?
Terms used on this card
- Access token
- A digital key or pass that proves a user or system has signed in, or is allowed to call another system.
- API
- A defined way for two software systems to exchange data or request actions from each other.