6 min readtechnicalFeatured
Why Identity Precedes Connectivity in IoT Security
A technical examination of securing connected devices through effective identity management, MQTT authentication, and AWS IoT implementation.
Blog
Writing on Identity & Security
Practical guides on OAuth 2.0, OpenID Connect, SAML, Keycloak, and the platform engineering behind identity systems.
Top tags (25)
595 posts · page 23 of 30
6 min readTechnicalFeatured
Identity-Driven Kubernetes Access: Beyond RBAC with Gatekeeper and Kyverno
Move beyond standard RBAC by implementing identity-driven access controls with OPA Gatekeeper and Kyverno to secure your Kubernetes clusters.
6 min readSecurityFeatured
Implementing Account Lockout and Brute Force Protection in Spring Security
Learn how to secure your Spring applications against brute force attacks by implementing account lockout strategies, rate limiting, and CAPTCHA integration.
6 min readBackendFeatured
The Complete Guide to TLS 1.3: Changes & Importance
Explore the critical updates in TLS 1.3, how to configure it in Spring Boot, and why these changes enhance HTTPS and overall protocol security.
6 min readtechnicalFeatured
Implementing Delegated Administration in IAM Systems
Learn how to implement delegated administration in IAM systems to manage scoped admin roles and secure organizational access effectively.
6 min readtechnicalFeatured
OAuth2 for Machine Learning APIs: Securing Model Serving Endpoints
Learn how to secure ML model serving endpoints using OAuth2 protocols to protect sensitive data and ensure proper API authentication.
6 min readtechnicalFeatured
Identity Data Security: Encrypting and Tokenizing PII in Identity Stores
Explore essential methods for securing personally identifiable information in identity stores through encryption and tokenization techniques.
6 min readtechnicalFeatured
Implementing Consent Management with OIDC: GDPR and Privacy Compliance
Learn how to integrate OIDC for consent management and meet GDPR privacy compliance requirements.
6 min readDevelopmentFeatured
The Role of Identity in DevSecOps: Integrating Security into the Pipeline
Learn how integrating identity management into your DevSecOps workflow strengthens pipeline security and enables reliable code signing practices.
6 min readtechnicalFeatured
Implementing Risk-Based Authentication with Keycloak and Spring Boot
Learn how to build adaptive authentication flows with Keycloak and Spring Boot. This guide covers risk scoring, step-up auth, and custom authentication implementation.
6 min readBackendFeatured
Common OAuth2 Implementation Mistakes and How to Avoid Them
Learn to avoid critical OAuth2 implementation errors and security anti-patterns by applying practical guidance for secure authentication flows.
Part 9 · OAuth 2.0 Security
6 min readBackendFeatured
OAuth2 Device Grant: IoT & CLI Auth (RFC 8628)
Learn how the OAuth2 Device Authorization Grant enables secure authentication for headless IoT devices and command-line interfaces.
Part 8 · OAuth 2.0 Security
6 min readtechnicalFeatured
Understanding DPoP for OAuth2: Securing Token Binding with RFC 9449
Learn how DPoP enhances OAuth2 security by binding access tokens to specific clients, preventing token theft and replay attacks.
Part 3 · OAuth 2.0 Security
6 min readBackendFeatured
OAuth2 Client Authentication Methods: client_secret_basic, private_key_jwt, and More
Explore essential OAuth2 client authentication strategies like client_secret_basic and private_key_jwt for securing API access.
Part 1 · OAuth 2.0 Security
6 min readDevelopmentFeatured
The Complete Guide to JSON Web Token (JWT) Claims
Explore registered and custom JWT claims, learn token validation techniques, and apply best practices for secure authentication.
Part 9 · OAuth 2.0 RFCs Every Engineer Should Read
6 min readBackendFeatured
Understanding OAuth 2.0 Rich Authorization Requests (RAR)
Explore how OAuth 2.0 Rich Authorization Requests (RAR) enable fine-grained authorization through RFC 9396.
Part 4 · OAuth 2.0 & OIDC Mastery
6 min readtechnicalFeatured
Workforce vs Customer Identity (CIAM): Implementation Guide
Explore the critical differences between workforce identity and customer identity management, focusing on implementation strategies for B2B and B2C scenarios.
Part 6 · Identity Platform Architecture
6 min readBackendFeatured
Building an Identity-Aware API Gateway with Kong and OIDC
Learn how to implement effective identity-aware authentication in your API gateway using Kong, OIDC, and JWT plugins.
Part 1 · Identity Gateways & Legacy Integration
6 min readtechnicalFeatured
IAM Metrics: Measuring Security Effectiveness
Learn how to measure security effectiveness using IAM metrics, access review metrics, and identity governance metrics to optimize your security posture.
Part 7 · Identity Analytics & Observability
6 min readtechnicalFeatured
Implementing Just-in-Time Provisioning with SAML and OIDC
Learn how to implement just-in-time provisioning workflows leveraging SAML, OIDC, and SCIM to automate user creation and synchronization across platforms.
Part 8 · Identity Platform Architecture