Tag
Read 27 articles on Identity by Ashish Srivastava — practical guides covering implementation patterns, security, and production lessons.
27 posts · page 2 of 2
RFC 8414 defines how authorization servers publish supported authentication methods. This post explores the default client_secret_basic method and its alternatives.
Part 4 · Authorization Server Metadata (RFC 8414)Explore essential authentication patterns for serverless identity in Lambda and cloud functions, including Cognito authorizers and security best practices.
Learn how integrating identity management into your DevSecOps workflow strengthens pipeline security and enables reliable code signing practices.
Explore how privacy-preserving authentication methods, including zero-knowledge proofs and anonymous credentials, transform identity management while ensuring GDPR compliance.
Navigate the complexities of SAML, OAuth 2.0, and OIDC with a focused comparison to guide your enterprise authentication strategy.
Part 3 · SAML Mastery SeriesUnderstand how OpenID Connect (OIDC) builds on OAuth 2.0 to provide identity solutions, covering ID tokens, discovery mechanisms, and essential flows.
Part 1 · OpenID Connect Deep Dive SeriesLearn how to architect a production-ready multi-tenant OAuth 2.0 authorization server using Keycloak, ensuring secure tenant isolation for SaaS applications.
Part 8 · OAuth 2.0 Deep Dive Series
