Kubernetes Authentication and Authorization at Robinhood - Lessons from Reductions, Migrations, and Designing Automation
Explore Robinhood's journey in implementing least privilege for Kubernetes RBAC, including challenges, solutions, and lessons learned in managing authentication and authorization.
OIDC and Workload Identity in Kubernetes
Explore OIDC and Workload Identity in Kubernetes for secure cloud resource access. Learn setup, authentication workflows, and implementation on public clouds through concepts and demos.
Harbor: Advanced Features and Community Engagement
Explore advanced features of Harbor, an open-source cloud-native registry for storing and managing container images and Helm charts. Learn about OIDC, replication, and community involvement.
OpenShift WebConsole - Bring Your Own OIDC Provider
Explore OpenShift WebConsole's adaptation for direct OIDC provider integration, addressing multi-server session challenges and authentication implementation in cluster environments.
Identity-Based Security and Privacy for the Internet of Things
Explore IoT identity management challenges, opportunities, and solutions for seamless authentication, robust security, and user-controlled privacy across diverse devices and platforms.
A Visual Journey to Demystifying OAuth2 and OIDC - Why Do They Exist and How to Properly Use Them to Secure Your Applications
Explore OAuth2, OIDC, and related security standards through visual explanations. Learn their purposes, differences, and proper implementation for secure authentication and authorization.
Who dis? The Right Way To Authenticate
Explore secure authentication methods, including tokens, OAuth, and SAML. Learn best practices, common issues, and key takeaways for implementing robust authentication in your systems.
Adventures in Authentication and Authorization
Explore Netflix's journey in implementing authentication and authorization for microservices, discussing technology choices, challenges, and innovative solutions for a robust zero-trust ecosystem.
Authz is the New Authn - Trust Elevation with UMA and OpenID Connect
Explore standards-based trust elevation in online identity using UMA and OpenID Connect for enhanced fraud mitigation and centralized authentication policies in web access management.
A Comprehensive Formal Security Analysis of OAuth 2.0
Comprehensive formal security analysis of OAuth 2.0, examining authorization, authentication, and session integrity properties, and discussing potential attacks and mitigations.
Avoiding an Identity Crisis - Authentication with Windows Server Containers
Explore authentication methods for .NET applications in Windows Server containers, covering Active Directory integration, gMSAs, and modern protocols like OAuth for secure identity management.
Adventures in Open Banking - Understanding OAuth and OpenID Client Ecosystems
Explore OAuth, OpenID Connect, and Open Banking standards in the EU, focusing on security measures, client registration, and API ecosystem development for financial services.
OpenID Connect & OAuth 2.0 - Security Best Practices
Explore OpenID Connect and OAuth 2.0 security best practices, including attack models, countermeasures, and implementation guidelines for various application types and scenarios.
OpenID Connect & OAuth 2.0 - Security Best Practices
Explore OpenID Connect and OAuth 2.0 security best practices, including attack models, client authentication, and countermeasures against common vulnerabilities in API protection and identity protocols.
OpenID Connect & OAuth 2.0 - Security Best Practices
Explore security best practices for OpenID Connect and OAuth 2.0, covering attack models, flow updates, and countermeasures to enhance API protection and authentication protocols.
Implementing OpenID Connect and OAuth 2.0 – Tips from the Trenches
Learn best practices for implementing OpenID Connect and OAuth 2.0 in modern applications. Explore architectural patterns, protocol flows, token design, and solutions for common challenges in identity and access control.
Authentication and Authorization in Blazor
Explore Blazor's security model, integrating with Identity Server 4, implementing roles and policies, and adapting for PWA offline mode in this deep dive into authentication and authorization for .NET developers.
Common Mistakes and Misconceptions in Web App Security Using OAuth 2.0 and OpenID Connect
Explores common pitfalls in implementing OAuth 2.0 and OpenID Connect for web app security, covering key concepts, best practices, and potential vulnerabilities using IdentityServer4 on ASP.NET Core.
OAuth 2.1 and Beyond
Explore modern OAuth techniques for enhanced security, including strong client authentication, proof-of-possession tokens, and hardened authorization requests.
An Extensive Formal Security Analysis of the OpenID Financial Grade API
Comprehensive formal security analysis of OpenID Financial-grade API, uncovering vulnerabilities and proposing mitigations for this high-stakes OAuth 2.0 profile designed for Open Banking scenarios.
Building Identity for an Open Perimeter
Explore Netflix's cloud-first security approach, focusing on identity as the new perimeter through SSO, MFA, and adaptive authentication for a location-independent strategy.