8 min readBackendFeatured
Building a Self-Service Password Reset with Spring Boot and Keycloak
Learn how to build a secure self-service password reset mechanism with Spring Boot and Keycloak, covering required actions and identity management.
Blog
Writing on Identity & Security
Practical guides on OAuth 2.0, OpenID Connect, SAML, Keycloak, and the platform engineering behind identity systems.
Top tags (25)
#authentication74#security71#oauth239#keycloak33#identity-management30#spring-security24#api-security19#oidc17#access-control15#web-security15#saml13#spring-boot13#zero-trust13#devsecops11#java11#cloud-security10#jwt10#security-architecture10#sso10#backend9#cybersecurity8#authorization7#identity7#identity-security7#openid-connect7View all →
217 posts · page 3 of 11
6 min readBackendFeatured
Understanding and Implementing CWE-306: Missing Authentication
Learn how to identify and remediate missing authentication flaws in web applications using security scanners and proper Spring Security configurations.
6 min readBackendFeatured
Implementing Cryptographic Agreements in Identity: ECDH and Key Agreement Protocols
Explore how ECDH and elliptic curve cryptography establish secure key agreements for identity systems and TLS handshakes.
Part 3 · Cryptographic Protocols Guide
6 min readBackendFeatured
Building Identity Analytics: Mining Authentication Logs for Insights
Discover techniques for mining authentication logs to extract actionable identity insights and improve security posture using the ELK stack.
Part 1 · Identity Security Series
8 min readBackendFeatured
OAuth2 Dynamic Client Registration for Multi-Tenant SaaS
Explore how OAuth2 Dynamic Client Registration enables automated client provisioning for multi-tenant SaaS platforms, ensuring scalable identity management.
6 min readtechnicalFeatured
Securing Legacy Applications with a Reverse Proxy Identity Gateway
Learn how to secure legacy applications by implementing a reverse proxy identity gateway such as Pomerium or Ory Oathkeeper to modernize authentication.
6 min readBackendFeatured
Implementing Progressive Profiling in Identity Applications
Learn how to implement progressive profiling in identity applications to improve registration UX and gather data incrementally without friction.
Part 3 · Identity Architecture Patterns
6 min readtechnicalFeatured
Understanding and Implementing CWE-287: Improper Authentication
Learn how to identify and fix CWE-287 improper authentication flaws using OWASP standards and practical security implementation strategies.
6 min readtechnicalFeatured
Building Multi-Factor Authentication with TOTP in Spring Boot
Learn how to secure your Spring Boot applications by integrating TOTP-based Multi-Factor Authentication with Google Authenticator for enhanced security.
6 min readtechnicalFeatured
Why Identity Precedes Connectivity in IoT Security
A technical examination of securing connected devices through effective identity management, MQTT authentication, and AWS IoT implementation.
Part 1 · IoT Security & Architecture Series
8 min readtechnicalFeatured
Implementing Enterprise SSO with Azure AD, Okta, and Keycloak
Learn how to implement enterprise SSO solutions using Azure AD, Okta, and Keycloak to streamline identity management across your organization.
Part 3 · Enterprise Identity Architecture Series
6 min readTechnicalFeatured
Identity-Driven Kubernetes Access: Beyond RBAC with Gatekeeper and Kyverno
Move beyond standard RBAC by implementing identity-driven access controls with OPA Gatekeeper and Kyverno to secure your Kubernetes clusters.
6 min readBackendFeatured
Building a Custom Authentication Provider in Spring Security
Learn how to construct a custom authentication provider in Spring Security to handle specific user validation logic and security requirements.
7 min readTechnicalFeatured
OAuth2 Security Best Practices Checklist: 2025 Edition
Review essential OAuth2 security best practices, audit criteria, and security review steps for 2025 to ensure strong authentication integrity.
6 min readSecurityFeatured
Implementing Account Lockout and Brute Force Protection in Spring Security
Learn how to secure your Spring applications against brute force attacks by implementing account lockout strategies, rate limiting, and CAPTCHA integration.
6 min readBackendFeatured
The Complete Guide to TLS 1.3: Changes & Importance
Explore the critical updates in TLS 1.3, how to configure it in Spring Boot, and why these changes enhance HTTPS and overall protocol security.
Part 3 · Transport Layer Security Mastery Series
6 min readtechnicalFeatured
Implementing Delegated Administration in IAM Systems
Learn how to implement delegated administration in IAM systems to manage scoped admin roles and secure organizational access effectively.
6 min readtechnicalFeatured
OAuth2 for Machine Learning APIs: Securing Model Serving Endpoints
Learn how to secure ML model serving endpoints using OAuth2 protocols to protect sensitive data and ensure proper API authentication.
6 min readTechnicalFeatured
Building a Real-Time Identity Dashboard with Keycloak and Grafana
Learn how to construct a real-time identity dashboard integrating Keycloak and Grafana to visualize authentication analytics and security monitoring data effectively.
6 min readtechnicalFeatured
Identity Data Security: Encrypting and Tokenizing PII in Identity Stores
Explore essential methods for securing personally identifiable information in identity stores through encryption and tokenization techniques.