Blog
Practical guides on OAuth 2.0, OpenID Connect, SAML, Keycloak, and the platform engineering behind identity systems.
595 posts · page 18 of 30
Learn how SPIFFE and SPIRE enable secure workload identity through SVIDs and attestation, essential for platform and security engineers.
Part 3 · Machine Identity and Workload AuthExplore how X.509 certificates and mutual TLS establish secure service identities, ensuring secure communication between backend services.
Part 2 · Machine Identity and Workload AuthWhy machine identity is the bigger problem in modern security. Explore the challenges of non-human identity, workload authentication, and the need for accurate inventory.
Part 1 · Machine Identity and Workload AuthA walkthrough on configuring AWS Lambda to automatically rotate secrets in Secrets Manager, ensuring database credentials remain secure and up-to-date.
Part 4 · AWS Secrets and Key ManagementA clear comparison of AWS KMS and Secrets Manager, explaining how each service handles encryption keys and sensitive data differently.
Part 3 · AWS Secrets and Key ManagementUnderstand every field in the RFC 8414 metadata document. This guide covers issuer, authorization_endpoint, token_endpoint, and scopes_supported for identity engineers.
Part 2 · Authorization Server Metadata (RFC 8414)Implement zero trust security with a phased rollout plan. This guide provides a clear roadmap and checkpoints for engineering managers and architects.
Part 5 · Zero Trust, ImplementedA technical examination of Policy Enforcement Points and micro-segmentation, detailing their role in service mesh and authorization architecture for Zero Trust.
Part 4 · Zero Trust, ImplementedLearn how leveraging TPMs and device certificates establishes strong, verifiable identity for zero-trust network access.
Part 3 · Zero Trust, ImplementedTraditional network perimeters are obsolete. Learn how identity-centric zero trust models enforce continuous evaluation and strong authentication to secure modern infrastructure.
Part 2 · Zero Trust, ImplementedA practical guide to inserting custom authentication logic before the standard username/password filter in Spring Security configurations.
Part 3 · Spring Security Filter Chain MasteryLearn how to configure SecurityFilterChain in Spring Security 6 using the Lambda DSL and RequestMatchers. This guide covers multiple chains and best practices for Java developers.
Part 2 · Spring Security Filter Chain MasteryUnderstand how the Spring Security filter chain operates, why filter order matters, and how DelegatingFilterProxy integrates with servlet architecture.
Part 1 · Spring Security Filter Chain MasteryLearn how to implement enterprise SSO with Spring Security SAML, covering service provider configuration and migration paths for Spring Boot applications.
Part 5 · Spring Security Deep Dive SeriesLearn how to configure context-aware access control using conditional access policies in Keycloak and ForgeRock environments.
Part 12 · Zero Trust & Modern Security Architecture SeriesExplore the technical architecture of biometric authentication, covering fallback mechanisms, accessibility considerations, and secure user verification strategies.
Part 5 · Passwordless AuthenticationA technical look at passkey architecture, covering device-bound constraints, iCloud/Google sync protocols, and critical account recovery strategies.
Part 4 · Passwordless AuthenticationUnderstand how WebAuthn and FIDO2 enable secure, passwordless authentication through public key cryptography and user verification.
Part 3 · Passwordless AuthenticationExplore the security implications of magic links, focusing on session binding, single-use tokens, and mitigating email prefetch attacks.
Part 2 · Passwordless AuthenticationPasswords are becoming obsolete. Explore how phishing-resistant, passwordless authentication methods are reshaping the future of digital security.
Part 1 · Passwordless Authentication
