Collections
Series
Curated multi-part series — read end-to-end on OAuth 2.0, OIDC, SAML, Keycloak, and more.
Latest series · 1 part
LLM Evaluation Engineering
A practical guide to deploying LLMs safely using online evaluation strategies like A/B testing, canary releases, and guarded rollouts.
All series(37)
Series · 5 parts
AWS Security Observability
- 1
CloudTrail, CloudWatch, and GuardDuty: Who Does What
Jun 2, 2026 · 6 min read
- 2
AWS Alerting: Fire on Real Threats
Jun 8, 2026 · 6 min read
- 3
AWS Security Hub, Config, and Audit Manager Compared
Jun 9, 2026 · 6 min read
- 4
Log Retention, CloudWatch Logs, and Cost Control
Jun 10, 2026 · 6 min read
Series · 6 parts
Multi-Cloud Identity
- 1
Why Multi-Cloud Identity Fragments
Jun 11, 2026 · 6 min read
- 2
Multi Cloud Identity Management Framework: A Reference Architecture
Jun 12, 2026 · 6 min read
- 3
Federating AWS, Azure, and GCP to One Identity Provider
Jun 13, 2026 · 6 min read
- 4
Building Resilient Multi-Region IAM with Keycloak and AWS Global Accelerator
May 24, 2026 · 6 min read
Series · 7 parts
AWS Secrets and Key Management
- 1
AWS Secrets Manager vs Parameter Store: The Actual Decision
Jun 21, 2026 · 6 min read
- 2
KMS Fundamentals: CMKs, Data Keys, and Envelope Encryption
Jun 22, 2026 · 6 min read
- 3
KMS vs Secrets Manager: Different Jobs
Jul 15, 2026 · 6 min read
- 4
Automatic Secret Rotation With Lambda
Jul 16, 2026 · 6 min read
Series · 6 parts
AWS IAM Deep Dive
- 1
IAM Policy Evaluation Logic, Step by Step
Sep 19, 2026 · 6 min read
- 2
IAM Users vs Roles: Static vs Temp Credentials
Sep 20, 2026 · 6 min read
- 3
AWS STS & AssumeRole: Temp Credentials & External IDs
Sep 21, 2026 · 6 min read
- 4
AWS Permission Boundaries and Service Control Policies Explained
Sep 22, 2026 · 6 min read
Series · 5 parts
Keycloak Security Hardening
- 1
Keycloak Hardening: A Checklist for a Fresh Install
Sep 6, 2026 · 6 min read
- 2
Token Lifetimes, Sessions, and Revocation in Keycloak
Sep 7, 2026 · 6 min read
- 3
Content Security Policy and Security Headers in Keycloak
Sep 8, 2026 · 6 min read
- 4
Adaptive Authentication and Conditional Flows in Keycloak
Sep 17, 2026 · 6 min read
Series · 6 parts
SAML 2.0 for Engineers
- 1
SAML 2.0 in One Diagram
Sep 11, 2026 · 6 min read
- 2
SAML Assertions, Statements, and the Schema
Sep 12, 2026 · 6 min read
- 3
SP-Initiated vs IdP-Initiated SSO: Security Guide
Sep 13, 2026 · 6 min read
- 4
Signing and Encrypting SAML Assertions: A Guide
Sep 14, 2026 · 6 min read
Series · 5 parts
Keycloak Identity Federation
- 1
Keycloak User Federation vs Identity Provider
Sep 1, 2026 · 6 min read
- 2
Keycloak LDAP User Federation: Mechanics, Mapping, and Tuning
Sep 2, 2026 · 6 min read
- 3
Integrating Keycloak with Active Directory: LDAP, Kerberos & Group Mapping
Sep 3, 2026 · 6 min read
- 4
OIDC and SAML Identity Brokering in Keycloak
Sep 4, 2026 · 6 min read
Series · 5 parts
Keycloak Themes and SPIs
- 1
Keycloak Theme Structure and the Base Theme
Aug 26, 2026 · 6 min read
- 2
Building a Custom Login Theme With FreeMarker
Aug 27, 2026 · 6 min read
- 3
Branding a Keycloak Login: CSS, Assets, and Email Templates
Aug 28, 2026 · 6 min read
- 4
The Keycloak Service Provider Interface, Explained
Aug 30, 2026 · 6 min read
Series · 1 part
RAG from Zero to Production
Series · 6 parts
Keycloak in Production
- 1
Keycloak Architecture: Realms, Clients, and the Data Model
Jul 29, 2026 · 6 min read
- 2
Keycloak Production Mode: Hostname, Proxy, and TLS
Aug 19, 2026 · 6 min read
- 3
Keycloak High Availability, Clustering, and Cache Replication
Aug 20, 2026 · 6 min read
- 4
Keycloak Multi-Tenancy: Realms, Orgs, Shared
Aug 21, 2026 · 6 min read
Series · 9 parts
Spring Security Filter Chain Mastery
- 1
The Spring Security Filter Chain, Ordered
Jul 7, 2026 · 6 min read
- 2
SecurityFilterChain in Spring Security 6
Jul 8, 2026 · 6 min read
- 3
addFilterBefore and UsernamePasswordAuthenticationFilter
Jul 9, 2026 · 6 min read
- 4
OncePerRequestFilter: The Right Base Class for JWT
Jul 25, 2026 · 6 min read
Series · 9 parts
angular-oauth2-oidc in Production
- 1
angular-oauth2-oidc: Setting Up Code Flow With PKCE
Jun 1, 2026 · 6 min read
- 2
The AuthConfig Reference: Every Property That Matters
Jun 3, 2026 · 6 min read
- 3
Angular OAuth2/OIDC: loadDiscoveryDocumentAndTryLogin
Jun 4, 2026 · 6 min read
- 4
OAuth 2.0 Refresh Tokens in Angular: Silent Refresh with useRefreshTokens
Jun 5, 2026 · 6 min read
Series · 8 parts
JWT From the Spec Up
- 1
Anatomy of a JWT: Header, Payload, and Signature
Aug 9, 2026 · 6 min read
- 2
The Seven Registered Claims: iss, sub, aud, exp, nbf, iat, jti
Aug 10, 2026 · 6 min read
- 3
JWT Custom Claims: Public, Private, and Custom | JWT From the Spec Up
Aug 11, 2026 · 6 min read
- 4
JWT JTI: Replay Protection and Token Revocation
Aug 12, 2026 · 6 min read
Series · 10 parts
OAuth 2.0 RFCs Every Engineer Should Read
- 1
RFC 6749 Revisited: What Still Applies in 2026
Aug 3, 2026 · 6 min read
- 2
RFC 7636: PKCE and the Authorization Code Interception Attack
Aug 4, 2026 · 6 min read
- 3
RFC 8628: The Device Authorization Grant
Aug 5, 2026 · 6 min read
- 4
RFC 8693: Token Exchange, Delegation, and Impersonation
May 29, 2026 · 6 min read
Series · 6 parts
mTLS With Spring Boot
- 1
TLS and mTLS Fundamentals
Jul 23, 2026 · 6 min read
- 2
Understanding X.509 Certificates: From Basics to mTLS Implementation
Apr 17, 2026 · 6 min read
- 3
Enabling TLS and mTLS in Spring Boot
Jul 30, 2026 · 6 min read
- 4
Implementing Mutual TLS in Spring Boot Applications
Apr 18, 2026 · 6 min read
Series · 6 parts
Passwordless Authentication
- 1
Why Passwords Are Finally Losing | WebAuthn Guide
Jun 30, 2026 · 6 min read
- 2
Magic Links: Design, Threats, and Session Binding
Jul 1, 2026 · 6 min read
- 3
WebAuthn and FIDO2, Explained
Jul 2, 2026 · 6 min read
- 4
Passkeys: Sync, Device-Bound, and Recovery
Jul 3, 2026 · 6 min read
Series · 6 parts
Machine Identity and Workload Auth
- 1
Machine Identity Is the Bigger Problem
Jul 17, 2026 · 6 min read
- 2
X.509 and mTLS for Service Identity
Jul 18, 2026 · 6 min read
- 3
SPIFFE and SPIRE: Securing Identity in Ephemeral Infrastructure
Jul 19, 2026 · 6 min read
- 4
Short-Lived Credentials Over Long-Lived Secrets
Jul 20, 2026 · 6 min read
Series · 5 parts
Zero Trust, Implemented
- 1
What Zero Trust Actually Requires
Jun 15, 2026 · 6 min read
- 2
Identity as the Perimeter
Jul 10, 2026 · 6 min read
- 3
Device Trust and Certificate-Based Identity
Jul 11, 2026 · 6 min read
- 4
Policy Enforcement Points and Micro-Segmentation
Jul 12, 2026 · 6 min read
Series · 15 parts
Spring Security Deep Dive Series
- 1
AWS Compliance Automation: Config, Audit Manager, and Security Hub
Feb 1, 2026 · 6 min read
- 2
Spring Security: Filters, Chains & Auth
Feb 2, 2026 · 6 min read
- 3
Spring Security with JWT: Complete Authentication Implementation
Feb 3, 2026 · 8 min read
- 4
Spring Security Method Security: @PreAuthorize, @Secured, and SpEL
Mar 7, 2026 · 6 min read
Series · 2 parts
Security Architecture Series
Series · 10 parts
OpenID Connect Deep Dive Series
- 1
OpenID Connect Guide: Extending OAuth 2.0 for Identity Verification
Nov 17, 2025 · 6 min read
- 2
Understanding JWT: Structure, Signing, and Validation
Nov 18, 2025 · 6 min read
- 3
Implementing OIDC Authentication in Spring Boot with Keycloak
Nov 19, 2025 · 8 min read
- 4
OIDC Token Management: Access, ID, and Refresh Token Strategies
Nov 20, 2025 · 6 min read
Series · 10 parts
OAuth 2.0 Security
- 1
OAuth2 Client Authentication Methods: client_secret_basic, private_key_jwt, and More
Mar 28, 2026 · 6 min read
- 2
Understanding OAuth 2.0 Pushed Authorization Requests (PAR)
Mar 6, 2026 · 6 min read
- 3
Understanding DPoP for OAuth2: Securing Token Binding with RFC 9449
Mar 29, 2026 · 6 min read
- 4
Implementing OAuth2 Proof-of-Possession (PoP) Security Architecture
May 13, 2026 · 7 min read
Series · 10 parts
OAuth 2.0 Deep Dive Series
- 1
OAuth 2.0 Fundamentals: Grant Types Explained Simply
Jun 26, 2026 · 6 min read
- 2
OAuth 2.0 Authorization Code Flow with PKCE: A Complete Guide
Nov 8, 2025 · 6 min read
- 3
Implementing OAuth 2.0 Client Credentials Flow for Microservices
Nov 9, 2025 · 6 min read
- 4
OAuth 2.0 Token Introspection & Revocation Strategies
Nov 10, 2025 · 6 min read
Series · 15 parts
Keycloak Masterclass Series
- 1
Keycloak Architecture Deep Dive: Internal Components and Data Flow
Dec 6, 2025 · 6 min read
- 2
Keycloak Production: TLS, DB Tuning & K8s
Jun 25, 2026 · 6 min read
- 3
Keycloak Custom Authentication Flows: Building Custom Login Experiences
Dec 7, 2025 · 6 min read
- 4
Keycloak and Spring Boot Integration: Advanced Patterns
Dec 8, 2025 · 6 min read
Series · 5 parts
Identity Gateways & Legacy Integration
- 1
Building an Identity-Aware API Gateway with Kong and OIDC
Mar 24, 2026 · 6 min read
- 2
Building Identity-Aware Load Balancing with NGINX and Keycloak
May 8, 2026 · 6 min read
- 3
Building an Identity Gateway with Spring Cloud Gateway
Apr 15, 2026 · 6 min read
- 4
Securing Legacy Applications with a Reverse Proxy Identity Gateway
May 9, 2026 · 6 min read
Series · 7 parts
Identity Analytics & Observability
- 1
Building Identity Analytics: Mining Authentication Logs for Insights
May 5, 2026 · 6 min read
- 2
Building a Centralized Audit Log for Identity Events with ELK Stack
May 22, 2026 · 6 min read
- 3
Building a Real-Time Identity Dashboard with Keycloak and Grafana
Apr 14, 2026 · 6 min read
- 4
Implementing User Behavior Analytics for Identity Security
May 6, 2026 · 6 min read
Series · 4 parts
OAuth 2.0 & OIDC Mastery
- 1
OAuth 2.0 Explained: Roles, Tokens & Trust Boundaries
Nov 7, 2025 · 10 min read
- 2
Securing OAuth2 Bearer Token Usage: RFC 6750 Best Practices
May 25, 2026 · 6 min read
- 3
Understanding OAuth2 Multiple Response Types: A Technical Guide
May 12, 2026 · 6 min read
- 4
Understanding OAuth 2.0 Rich Authorization Requests (RAR)
Mar 26, 2026 · 6 min read
Series · 7 parts
Identity Platform Architecture
- 1
Designing a Centralized Identity Platform: Lessons Learned
Feb 28, 2026 · 6 min read
- 2
Building Identity Abstraction Layer: Provider-Agnostic Authentication
May 23, 2026 · 7 min read
- 3
How Identity Provider Bridging Works: SAML-to-OIDC Token Translation
Mar 1, 2026 · 6 min read
- 4
Building Identity Orchestration: Connecting Multiple IdPs with Custom Workflows
May 10, 2026 · 8 min read
Series · 6 parts
Frontend Identity Integration
- 1
OpenID Connect Frontend and Backend Integration Guide
May 4, 2026 · 6 min read
- 2
React Authentication with Auth0 and OIDC: A Developer Guide
Feb 26, 2026 · 6 min read
- 3
Building Secure Micro-Frontends with OIDC and Token Mediation
Mar 20, 2026 · 6 min read
- 4
Identity Architecture Patterns for Micro-Frontends and Multi-Platform
Mar 21, 2026 · 8 min read
Series · 2 parts
Identity & Access Management Series
Series · 11 parts
Machine Identity & DevSecOps Series
- 1
Building a Custom UserDetailsService with Spring Security
Jan 24, 2026 · 6 min read
- 2
Spring Security and GraphQL: Securing GraphQL APIs
Jan 25, 2026 · 6 min read
- 3
Machine Identity Management: The Hidden Attack Surface
Mar 2, 2026 · 6 min read
- 4
GitOps Security: Protecting Kubernetes Secrets and Configuration
Jan 26, 2026 · 6 min read
Series · 15 parts
AWS IAM & Cloud Security Series
- 1
The Future of Authentication: Passkeys, AI, and Passwordless in 2025
Dec 28, 2025 · 7 min read
- 2
AWS IAM Fundamentals: Users, Roles, Policies, and Best Practices
Dec 29, 2025 · 8 min read
- 3
AWS IRSA: Fine-Grained Pod Identity for EKS
Dec 30, 2025 · 6 min read
- 4
AWS STS: AssumeRole, Federation, and Temporary Credentials
Dec 31, 2025 · 6 min read
Series · 10 parts
Zero Trust & Modern Security Architecture Series
- 1
Securing Keycloak: Hardening Guide for Production
Dec 20, 2025 · 6 min read
- 2
Zero Trust Architecture: A Practical Implementation Guide
Dec 21, 2025 · 6 min read
- 3
Identity Threat Detection and Response (ITDR): The New Security Frontier
Dec 22, 2025 · 8 min read
- 4
BeyondTrust: Building a Zero Trust Identity Framework
Dec 23, 2025 · 6 min read
Series · 10 parts
Passwordless & Next-Gen Authentication Series
- 1
Security Architecture Review: Patterns for Identity-First Design
Jan 9, 2026 · 6 min read
- 2
Passwordless Authentication: The Complete Implementation Guide
Jan 10, 2026 · 8 min read
- 3
FIDO2 and WebAuthn: Building Phishing-Resistant Authentication
Jan 11, 2026 · 6 min read
- 4
Passkeys Guide: Google, Apple, Microsoft Ecosystems
Jan 12, 2026 · 6 min read
Series · 10 parts
SAML Mastery Series
- 1
SAML 2.0 Explained: The Complete Guide to Enterprise SSO
Nov 26, 2025 · 6 min read
- 2
Configuring SAML SSO: Service Provider Setup Guide
Nov 27, 2025 · 6 min read
- 3
SAML vs OAuth 2.0 vs OIDC: Which Protocol to Choose in 2025
Nov 28, 2025 · 8 min read
- 4
Troubleshooting SAML: Common Issues and Fixes
Nov 29, 2025 · 6 min read