Collection of app2app articles/presentations

This is a list of links to the various articles/presentations on app2app I've done or been involved with:

My original 2019 blog post on app2app, as re-blogged by OpenID Foundation

2020 Presentation at Identiverse (Unfortunately this seems to not be working currently - next best thing is to watch the next link, the OAuth Sec Workshop presentation)

2020 Presentation at OAuth Security Workshop (the first approximately 10 minutes overlaps with the Identiverse presentation, the remainder cover different areas)

Joint yes.com and Authlete blog on Improving app-to-app security

OpenID Foundation announcement of FAPI-RW App2app Certification Programme

OpenID Foundation Instructions on running FAPI-RW app2app certification

And some example videos showing the flow:

Example app2app flow using Authlete's authorization server backend product

Example app2app flow paying into Monzo from HSBC

Example web2app flow paying HMRC from HSBC

I also run training courses on app2app that go into more detail on the implementation, best practices, common patterns (and anti-patterns) and potential problems - an initial 90 minute training session plus workshops as necessary, particularly useful for banks that plan to implement app2app in their apps/authorization servers. Please drop me an email if you're interested.