Vaultの認証およびAuth Method: AppRole/OIDC/SAML - 第12回
Vaultの認証方法AppRole、OIDC、SAMLを詳しく解説。汎用的な認証手法の特徴と利点を学び、セキュアなアクセス管理を実現。
The Road to SLSA4 - Applying the Sigstore Ecosystem in a Corporate Environment
Explore Sigstore ecosystem implementation for software artifact integrity, covering self-hosting, keyless signatures, OIDC tokens, and verification methodologies in various environments.
Authentik - Open Source Self-Hosted Authentication System with OIDC and SAML
Explore Authentik, an open-source authentication system. Learn installation, configuration, reverse proxy setup, forward authentication, and OIDC implementation for enhanced security.
Identity-based Source Integrity with Gitsign
Explore Gitsign, a Sigstore project for keyless, identity-based Git commit signing. Learn its benefits over traditional methods and how it enhances security in CI/CD and GitOps workflows.
Growing the Chain: Trusting Build Provenance from Userspace
Explore techniques for establishing trust in CI/CD workflows, focusing on artifact signing, provenance generation, and building a chain of trust using open-source technologies like Sigstore and OIDC.
Integrating Identity into APIs with Okta and Kong - Developer Day 2021
Discover powerful authentication and authorization scenarios using Kong and Okta. Learn to implement sophisticated API access and management flows with OIDC and OAuth, including CI/CD pipeline integration.
Angular 8 and Spring Boot 2.2 - Building a CRUD App
Learn to build and secure a CRUD app using Angular 8 and Spring Boot 2.2, with OIDC integration for robust authentication and authorization.
Everything You Ever Wanted to Know About OAuth and OIDC
Comprehensive guide to OAuth and OpenID Connect protocols, covering basics, best practices, security, JWT tokens, scopes, and microservices architecture for developers and IT professionals.
Build Mobile Apps with Angular, Ionic 4, and Spring Boot
Develop a powerful Progressive Web App for iOS and Android using Ionic, Angular, and Spring Boot, with support for JWT, OIDC, and microservices.
OAuth and OpenID Connect in Plain English
Comprehensive guide to OAuth 2.0 and OpenID Connect, explaining key concepts, flows, and best practices for secure authentication and authorization in web applications.
Deploying Microservices to Kubernetes with Spring Boot and JHipster
Deploy microservices architecture to Minikube and Google Cloud using Spring Cloud Gateway, Spring Boot, and JHipster. Learn Kubernetes deployment, Docker image creation, secret management, HTTPS configuration, and scaling.
Kubernetes Security with Identity & OIDC
Explore Kubernetes security, focusing on identity management, OIDC, and certificate handling. Learn best practices for secure cluster access and enterprise-level implementations.
From the Cluster to the Cloud: Lateral Movements in Kubernetes
Explore techniques for lateral movement from Kubernetes containers to cloud resources, covering RBAC misconfigurations, authentication methods, and real-world incidents. Learn prevention and detection strategies.
Kubernetes Authentication and Authorization at Robinhood - Lessons from Reductions, Migrations, and Designing Automation
Explore Robinhood's journey in implementing least privilege for Kubernetes RBAC, including challenges, solutions, and lessons learned in managing authentication and authorization.
OIDC and Workload Identity in Kubernetes
Explore OIDC and Workload Identity in Kubernetes for secure cloud resource access. Learn setup, authentication workflows, and implementation on public clouds through concepts and demos.
Harbor: Advanced Features and Community Engagement
Explore advanced features of Harbor, an open-source cloud-native registry for storing and managing container images and Helm charts. Learn about OIDC, replication, and community involvement.
OpenShift WebConsole - Bring Your Own OIDC Provider
Explore OpenShift WebConsole's adaptation for direct OIDC provider integration, addressing multi-server session challenges and authentication implementation in cluster environments.
A Visual Journey to Demystifying OAuth2 and OIDC - Why Do They Exist and How to Properly Use Them to Secure Your Applications
Explore OAuth2, OIDC, and related security standards through visual explanations. Learn their purposes, differences, and proper implementation for secure authentication and authorization.
Authz is the New Authn - Trust Elevation with UMA and OpenID Connect
Explore standards-based trust elevation in online identity using UMA and OpenID Connect for enhanced fraud mitigation and centralized authentication policies in web access management.
Adventures in Open Banking - Understanding OAuth and OpenID Client Ecosystems
Explore OAuth, OpenID Connect, and Open Banking standards in the EU, focusing on security measures, client registration, and API ecosystem development for financial services.
OpenID Connect & OAuth 2.0 - Security Best Practices
Explore OpenID Connect and OAuth 2.0 security best practices, including attack models, countermeasures, and implementation guidelines for various application types and scenarios.