OpenID Connect & OAuth 2.0 - Security Best Practices
Explore OpenID Connect and OAuth 2.0 security best practices, including attack models, client authentication, and countermeasures against common vulnerabilities in API protection and identity protocols.
OpenID Connect & OAuth 2.0 - Security Best Practices
Explore security best practices for OpenID Connect and OAuth 2.0, covering attack models, flow updates, and countermeasures to enhance API protection and authentication protocols.
Implementing OpenID Connect and OAuth 2.0 – Tips from the Trenches
Learn best practices for implementing OpenID Connect and OAuth 2.0 in modern applications. Explore architectural patterns, protocol flows, token design, and solutions for common challenges in identity and access control.
Common Mistakes and Misconceptions in Web App Security Using OAuth 2.0 and OpenID Connect
Explores common pitfalls in implementing OAuth 2.0 and OpenID Connect for web app security, covering key concepts, best practices, and potential vulnerabilities using IdentityServer4 on ASP.NET Core.
An Extensive Formal Security Analysis of the OpenID Financial Grade API
Comprehensive formal security analysis of OpenID Financial-grade API, uncovering vulnerabilities and proposing mitigations for this high-stakes OAuth 2.0 profile designed for Open Banking scenarios.
Building Identity for an Open Perimeter
Explore Netflix's cloud-first security approach, focusing on identity as the new perimeter through SSO, MFA, and adaptive authentication for a location-independent strategy.
What the Heck is OAuth and OIDC
Explore OAuth and OpenID Connect: Learn their functionality, use cases, and implementation frameworks for secure authorization and authentication in modern applications.
In the World of Password123, Be Someone's #@%^)*!
Explore modern authentication methods, including multi-factor authentication, single sign-on, and federated authentication. Learn about OAuth and OIDC to enhance application security.
Securing APIs and Microservices with OAuth and OpenID Connect
Learn how OAuth and OpenID Connect can create a unified, distributed framework for securing microservices, enhancing agility and scalability in API deployments.
Introduction to OAuth 2.0 and OpenID Connect
Comprehensive overview of OAuth 2.0 and OpenID Connect, exploring delegation frameworks, authentication, and access control in modern web applications.
OAuth vs. SAML vs. OpenID Connect
Explore key identity federation protocols: OAuth, SAML, and OpenID Connect. Compare features, security levels, and use cases to make informed decisions for your application's single sign-on implementation.
You Shall Not Password - Modern Authentication for Web Apps
Explore modern web authentication beyond passwords, including SSO, 2FA, OAuth, and more. Learn the benefits, risks, and implementation of advanced security mechanisms for safer user logins.
How to Secure Your Node.js Containers on Kubernetes With Best Practices
Discover best practices for securing Node.js containers on Kubernetes, covering cluster protection, OIDC implementation, and application-specific security measures for robust DevOps deployments.
Building Identity for a Zero Trust Network
Exploring Netflix's zero trust network architecture, focusing on identity-based security, adaptive authentication, and device health to create a cloud-first, open perimeter environment.
Azure DevOps Workload Identity Federation with Azure - No More Secrets
Eliminate secrets in Azure DevOps pipelines with workload identity federation. Learn OIDC, service connections, token flow, and managed identities for secure Azure authentication.
Fédérez votre OpenStack avec votre Fournisseur d'Identité - Implémentation et Configuration
Découvrez comment configurer et implémenter la fédération d'identité OIDC dans OpenStack, en mettant l'accent sur la scalabilité et l'intégration avec différents outils comme Horizon, APIs et Terraform.
GitHub Azure AD OIDC Authentication for Actions
Learn to authenticate GitHub Actions with Azure AD using OIDC, eliminating the need for stored secrets. Explore token exchange, subject types, app registration, and federated credentials for enhanced security.
You Shall Not Password - Modern Authentication for Web Apps
Explore modern web authentication methods beyond passwords, including SSO, 2FA, OAuth, and FIDO2. Learn their benefits, limitations, and implementation for enhanced user security.
OpenId Connect and JSON Web Token Security in Quarkus
Learn to implement OpenID Connect and JWT authentication in Quarkus, utilizing Dev Services and Dev UI to create and test secure REST services with Hibernate Panache integration.
You Shall Not Password - Modern Authentication for Web Apps
Explore modern web authentication methods beyond passwords, including SSO, 2FA, OAuth, and more. Learn their benefits, limitations, and how to enhance user security in web applications.
EKS IAM Role Integration with Kubernetes ServiceAccount for AWS Cloud Native Applications
Manage security governance for AWS IAM credentials in Kubernetes cloud-native app deployments. Learn EKS OIC IAM Role integration with ServiceAccounts.