6 min readBackendFeatured
Implementing Smart Link Authentication: Phishing-Resistant Magic Links
Learn how to implement smart link authentication for phishing-resistant magic links and improve your passwordless email security posture.
Blog
Writing on Identity & Security
Practical guides on OAuth 2.0, OpenID Connect, SAML, Keycloak, and the platform engineering behind identity systems.
Top tags (25)
595 posts · page 21 of 30
6 min readtechnicalFeatured
IAM in Financial Services: PCI-DSS & SOX Compliance
Explore how robust IAM solutions ensure regulatory compliance and security within the financial services sector.
7 min readBackendFeatured
Implementing Back-Channel Logout in OIDC: Reliable Session Termination
Learn how to implement back-channel logout in OIDC for reliable session termination, covering logout tokens and session management strategies.
6 min readtechnicalFeatured
Implementing Dynamic Authorization with Cedar Policy Language (AWS)
Explore how to implement dynamic authorization using Cedar policy language and AWS Verified Permissions for effective access control.
6 min readtechnicalFeatured
SAML Artifact Binding: Low-Latency SSO Architecture
Learn how SAML artifact binding optimizes Single Sign-On performance by minimizing latency and network traffic compared to standard bindings.
6 min readBackendFeatured
Implementing Passwordless MFA with FIDO2 and WebAuthn in Spring Boot
Learn how to secure your Spring Boot applications with passwordless authentication using FIDO2 standards and WebAuthn protocols.
6 min readBackendFeatured
Understanding JWKS: Rotating Signing Keys Gracefully
Learn how to implement graceful key rotation using JWKS to maintain security and availability in your authentication infrastructure.
Part 9 · JWT From the Spec Up
7 min readBackendFeatured
Implementing OAuth2 Proof-of-Possession (PoP) Security Architecture
Learn how to implement OAuth2 Proof-of-Possession (PoP) to secure token transmission using sender-constrained and certificate-bound token strategies.
Part 4 · OAuth 2.0 Security
6 min readtechnicalFeatured
Understanding OAuth2 Multiple Response Types: A Technical Guide
Learn how OAuth2 handles multiple response types like hybrid flow and OIDC, and understand the role of the authorization server in these flows.
Part 3 · OAuth 2.0 & OIDC Mastery
6 min readBackendFeatured
Implementing Progressive Profiling in Identity Applications
Learn how to implement progressive profiling in identity applications to improve registration UX and gather data incrementally without friction.
Part 5 · Identity Platform Architecture
8 min readDevelopmentFeatured
Building Identity Orchestration: Connecting Multiple IdPs with Custom Workflows
Learn how to build identity orchestration platforms that connect multiple IdPs using custom workflows for flexible authentication routing.
Part 4 · Identity Platform Architecture
6 min readtechnicalFeatured
Securing Legacy Applications with a Reverse Proxy Identity Gateway
Learn how to secure legacy applications by implementing a reverse proxy identity gateway such as Pomerium or Ory Oathkeeper to modernize authentication.
Part 4 · Identity Gateways & Legacy Integration
6 min readBackendFeatured
Building Identity-Aware Load Balancing with NGINX and Keycloak
This guide covers setting up identity-aware load balancing with NGINX and Keycloak, focusing on JWT handling and secure authentication routing.
Part 2 · Identity Gateways & Legacy Integration
6 min readBackendFeatured
IAM for Data Lakes: Securing Big Data
Explore essential IAM techniques for securing big data environments using tools like Apache Ranger and AWS Lake Formation.
Part 6 · Identity Analytics & Observability
6 min readBackendFeatured
Implementing User Behavior Analytics for Identity Security
Learn how to deploy user behavior analytics to identify identity anomalies and strengthen behavioral detection through machine learning security techniques.
Part 4 · Identity Analytics & Observability
6 min readBackendFeatured
Building Identity Analytics: Mining Authentication Logs for Insights
Discover techniques for mining authentication logs to extract actionable identity insights and improve security posture using the ELK stack.
Part 1 · Identity Analytics & Observability
6 min readTechnicalFeatured
OpenID Connect Frontend and Backend Integration Guide
Learn how to implement OpenID Connect across full-stack applications using Angular for the frontend and Spring Boot for the backend.
Part 1 · Frontend Identity Integration
6 min readBackendFeatured
Understanding HTTP Strict Transport Security (HSTS) for Identity Applications
Learn how to secure identity applications with HTTP Strict Transport Security (HSTS) and Spring Boot configurations to enforce HTTPS.
6 min readBackendFeatured
Securing Server-Sent Events with OAuth2 Authentication
Learn how to implement OAuth2 authentication for Server-Sent Events to protect real-time streams in Spring applications.
6 min readBackendFeatured
Implementing Identity Governance with Custom Policy Engines
Learn how to build custom policy engines for identity governance using tools like OPA and Cedar to manage access control effectively.
