Blog
Practical guides on OAuth 2.0, OpenID Connect, SAML, Keycloak, and the platform engineering behind identity systems.
223 posts · page 6 of 12
Explore essential identity federation patterns for managing identities across AWS, Azure, and GCP. This guide covers multi-cloud identity strategies and cross-cloud security best practices.
Part 3 · Multi-Cloud Security Architecture SeriesLearn how Pushed Authorization Requests (PAR) defined in RFC 9126 improve OAuth 2.0 security and mitigate the risk of authorization code interception.
Part 3 · OAuth 2.0 SecurityExplore how RFC 8693 standardizes token exchange for delegation and impersonation scenarios in Keycloak environments.
Learn how to build a self-service identity portal leveraging Spring Boot and Keycloak for secure identity management and API access control.
Compare Role-Based Access Control and Attribute-Based Access Control models to determine the best authorization strategy for your infrastructure using OPA and XACML.
Explore how healthcare organizations implement identity and access management to ensure HIPAA compliance and protect sensitive patient data within EHR systems.
Explore how Open Banking and PSD2 mandate Strong Customer Authentication (SCA) to secure fintech transactions and payment systems through secure OAuth2 protocols.
Explore the differences between LDAP, Active Directory, and cloud-based directory services to understand their roles in modern identity management.
Learn how to secure identity applications using CSP headers to mitigate XSS vulnerabilities and enhance web security posture.
Learn how to secure your web applications with proper CORS configuration, handle preflight requests effectively, and resolve common cross-origin errors in Spring.
Explore essential web session security strategies, including the implementation of HttpOnly, SameSite, and JWT tokens to prevent session fixation and unauthorized access.
Learn how to secure your React application with Auth0 and OIDC. This guide covers implementation steps for effective frontend authentication.
Learn how to secure your Angular SPA with OpenID Connect by integrating the angular-oauth2-oidc library for effective authentication flows.
Explore essential gRPC security strategies covering TLS configuration, mTLS implementation, token propagation techniques, and effective interceptor patterns.
Learn essential patterns for securing GraphQL APIs, covering authentication flows, authorization strategies, and managing query complexity to prevent abuse.
Compare CAS, SAML, and OIDC protocols to understand their roles in legacy authentication and university SSO implementations.
Explore how identity provider bridging translates SAML assertions into OIDC tokens, facilitating integration between disparate authentication protocols using brokers like Keycloak.
Part 1 · Identity Architecture SeriesLearn how SBOMs and artifact signing enhance supply chain security through SLSA frameworks and software composition analysis.
Part 12 · Machine Identity & DevSecOps SeriesSecure your K8s cluster with advanced RBAC configurations and service account hardening techniques. Learn how Kyverno and pod security enforce strict access controls.
Part 11 · Machine Identity & DevSecOps SeriesA practical guide to securing APIs using Spring Security OAuth2, covering JWT decoders and token validation strategies.
Part 5 · Spring Security Deep Dive Series
