Abstract: Methods, systems, devices, and computer-readable media for a quarantining system are provided. A message comprising an application programming interface (API) request may be sent by a client device to a service provider system for access to a first application. The message may be received at a gateway of the service provider system. The gateway may determine that the API request is associated with potentially harmful, malicious, or otherwise unexpected activity. The message may be routed to a quarantine environment and a decoy API configured to interface with a decoy application that uses decoy information to emulate the requested first application may be identified. The API request may be modified to call the decoy API. The decoy application may be executed and a decoy response generated. The decoy response may be sent to the client device in response to the API request.

Abstract: Disclosed herein are system, method, and computer program product embodiments for differentiated authorization for domains of a multi-domain application. A computing device may identify a familiarity indicator based on identity information received with a request for access to a multi-domain application. Based on a risk assessment of the familiarity indicator, an access level for the access to the multi-domain application may be identified. A request for an access token that enables access to a first domain of the multi-domain application may be authorized based on the access level. A request for an access token that enables access to a second domain, such as a domain associated with a higher access level than the first domain of the multi-domain application, may be denied based on the access level.

Abstract: Disclosed herein are system, method, and computer program product embodiments for differentiated authorization for domains of a multi-domain application. A computing device may identify a familiarity indicator based on identity information received with a request for access to a multi-domain application. Based on a risk assessment of the familiarity indicator, an access level for the access to the multi-domain application may be identified. A request for an access token that enables access to a first domain of the multi-domain application may be authorized based on the access level. A request for an access token that enables access to a second domain, such as a domain associated with a higher access level than the first domain of the multi-domain application, may be denied based on the access level.

Abstract: Methods, systems, devices, and computer-readable media for a quarantining system are provided. A message comprising an application programming interface (API) request may be sent by a client device to a service provider system for access to a first application. The message may be received at a gateway of the service provider system. The gateway may determine that the API request is associated with potentially harmful, malicious, or otherwise unexpected activity. The message may be routed to a quarantine environment and a decoy API configured to interface with a decoy application that uses decoy information to emulate the requested first application may be identified. The API request may be modified to call the decoy API. The decoy application may be executed and a decoy response generated. The decoy response may be sent to the client device in response to the API request.