Blog
Practical guides on OAuth 2.0, OpenID Connect, SAML, Keycloak, and the platform engineering behind identity systems.
595 posts · page 25 of 30
Explore how identity provider bridging translates SAML assertions into OIDC tokens, facilitating integration between disparate authentication protocols using brokers like Keycloak.
Part 3 · Identity Platform ArchitectureExplore real-world insights on designing a centralized identity platform, including IAM evaluation techniques and strategic architecture decisions.
Part 1 · Identity Platform ArchitectureExplore essential web session security strategies, including the implementation of HttpOnly, SameSite, and JWT tokens to prevent session fixation and unauthorized access.
Part 6 · Frontend Identity IntegrationLearn how to secure your React application with Auth0 and OIDC. This guide covers implementation steps for effective frontend authentication.
Part 2 · Frontend Identity IntegrationLearn how to secure your Angular SPA with OpenID Connect by integrating the angular-oauth2-oidc library for effective authentication flows.
Part 6 · angular-oauth2-oidc in ProductionAdvanced techniques for defending against credential stuffing and preventing account takeovers through effective login security measures.
Explore essential identity federation patterns for managing identities across AWS, Azure, and GCP. This guide covers multi-cloud identity strategies and cross-cloud security best practices.
Learn how to build a self-service identity portal leveraging Spring Boot and Keycloak for secure identity management and API access control.
Compare Role-Based Access Control and Attribute-Based Access Control models to determine the best authorization strategy for your infrastructure using OPA and XACML.
Explore how healthcare organizations implement identity and access management to ensure HIPAA compliance and protect sensitive patient data within EHR systems.
Explore how Open Banking and PSD2 mandate Strong Customer Authentication (SCA) to secure fintech transactions and payment systems through secure OAuth2 protocols.
Explore the differences between LDAP, Active Directory, and cloud-based directory services to understand their roles in modern identity management.
Learn how to secure identity applications using CSP headers to mitigate XSS vulnerabilities and enhance web security posture.
Learn how to secure your web applications with proper CORS configuration, handle preflight requests effectively, and resolve common cross-origin errors in Spring.
Explore essential gRPC security strategies covering TLS configuration, mTLS implementation, token propagation techniques, and effective interceptor patterns.
Learn essential patterns for securing GraphQL APIs, covering authentication flows, authorization strategies, and managing query complexity to prevent abuse.
Compare CAS, SAML, and OIDC protocols to understand their roles in legacy authentication and university SSO implementations.
Explore the mechanics of BCrypt, Argon2, and PBKDF2 within Spring Security for implementing secure password hashing in modern applications.
Part 15 · Spring Security Deep Dive SeriesLearn to implement distributed tracing and capture security metrics in Spring applications using OpenTelemetry for enhanced observability.
Part 14 · Spring Security Deep Dive SeriesLearn how to configure Spring Security for LDAP authentication, enabling integration with Active Directory for enterprise user management.
Part 12 · Spring Security Deep Dive Series
