Biometric Auth in Web Apps: WebAuthn & Beyond
Explore how WebAuthn enables browser biometrics like Face ID and Touch ID to secure web applications beyond traditional passwords.
Part 5 · Passwordless & Next-Gen Authentication SeriesBlog
Practical guides on OAuth 2.0, OpenID Connect, SAML, Keycloak, and the platform engineering behind identity systems.
221 posts · page 9 of 12
Explore how WebAuthn enables browser biometrics like Face ID and Touch ID to secure web applications beyond traditional passwords.
Part 5 · Passwordless & Next-Gen Authentication SeriesExplore the technical implementation of passkeys within major tech ecosystems. This guide covers WebAuthn standards, cross-device sync strategies, and integration with Google, Apple, and Windows Hello.
Part 4 · Passwordless & Next-Gen Authentication SeriesExplore how FIDO2 and WebAuthn enable phishing-resistant authentication, replacing vulnerable passwords with secure passkeys and authenticators.
Part 3 · Passwordless & Next-Gen Authentication SeriesLearn how to implement passwordless authentication with FIDO2, WebAuthn, and passkeys to enhance security.
Part 2 · Passwordless & Next-Gen Authentication SeriesExplore essential patterns for identity-first security architecture, including STRIDE threat modeling and secure IAM implementation strategies.
Part 1 · Passwordless & Next-Gen Authentication SeriesLearn how to secure supply chains by implementing effective controls for third-party identity, vendor access, and JIT provisioning within a Zero Trust framework.
Part 10 · Zero Trust & Modern Security Architecture SeriesExplore essential Identity Governance and Administration strategies including access certification, role mining, RBAC, PAM, identity lifecycle management, and compliance requirements.
Part 9 · Zero Trust & Modern Security Architecture SeriesExplore how self-sovereign identity (SSI) shifts control to users via DIDs and verifiable credentials within the Web5 and blockchain ecosystem.
Part 8 · Zero Trust & Modern Security Architecture SeriesDiscover the shift from traditional VPNs to identity-aware proxies for modern zero trust security architectures.
Part 7 · Zero Trust & Modern Security Architecture SeriesLearn how to secure your APIs using rate limiting, JSON Web Tokens, and proper OAuth2 scope management to prevent unauthorized access.
Part 6 · Zero Trust & Modern Security Architecture SeriesExplore essential security patterns for microservices, covering OAuth2, JWT propagation, and mTLS integration in modern service meshes.
Part 5 · Zero Trust & Modern Security Architecture SeriesExplore how BeyondTrust constructs a comprehensive zero trust identity framework utilizing advanced assurance levels and trust mechanisms for modern security architectures.
Part 4 · Zero Trust & Modern Security Architecture SeriesDiscover how ITDR establishes a new security frontier by integrating credential theft detection, UEBA, and advanced security analytics to protect modern identities.
Part 3 · Zero Trust & Modern Security Architecture SeriesLearn how to implement zero trust architecture with a focus on identity security, least privilege principles, micro-segmentation strategies, and continuous verification mechanisms.
Part 2 · Zero Trust & Modern Security Architecture SeriesLearn how to secure your Keycloak deployment with production-grade hardening techniques, including brute force protection and CSP configuration.
Part 1 · Zero Trust & Modern Security Architecture SeriesThis guide covers building custom providers within Keycloak using the SPI architecture to extend functionality and create effective plugins.
Part 15 · Keycloak Masterclass SeriesLearn how to implement multi-tenant identity management using Keycloak Organizations, covering B2B workflows and organization structures.
Part 14 · Keycloak Masterclass SeriesExplore how JDBC_PING and DNS_PING cache strategies impact Keycloak benchmark results and overall system performance.
Part 13 · Keycloak Masterclass SeriesLearn how to programmatically manage Keycloak realms and users using the Keycloak REST API for efficient automation.
Part 12 · Keycloak Masterclass SeriesExplore essential lessons learned when migrating from ForgeRock to Keycloak. This walkthrough covers identity migration strategies and platform adoption tips.
Part 11 · Keycloak Masterclass Series