I've written an article for the IT Chronicles website about the importance of identity in API Security. You can read it here: https://itchronicles.com/uncategorized/understanding-the-role-of-identity-in-api-security/