How does your enterprise implement identity and access management (IAM) for in-house applications? Do the developers who implement it have IAM expertise? Does every team implement their own? Implementing IAM using industry best practices with clear separation of concerns is challenging even for the experts and chances are that there aren't enough experts to do it at scale. And then what happens when it's time to migrate to a new system? That's a lot of refactoring... In this session we will discuss how to address this problem by creating APIs that enable developers without IAM expertise to implement the IAM consistently and correctly.