35 articles tagged Authentication.
A while back I needed a summary of which protocols were supported/recommended in different situations by Azure Active Directory while I was researching the “When To Use Which (OAuth2) Grants and (OIDC) Flows” post. So, I am summarizing it here.
Read article: Summary of Azure Active Directory OAuth2 Authorization Grant and OIDC Authentication Flow UsesAuthentication. Federation. Single Sign On (SSO). I’ve mentioned these concepts many times. I haven’t actually formally defined what each of these terms mean even though I’ve used these many times throughout my writing — these concepts are closely related.
Read article: Authentication vs. Federation vs. SSOThe OpenID Connect (OIDC) family of specs supports logout (from a single application) and global (or single) logout (from all applications that the user has logged into through the OpenID Provider, OP), but these features are optional or in draft status (as of Q2, 2017). So, these spec features may…
Read article: OpenID Connect LogoutIn part 1 and part 2 of Understanding OpenID Connect, core concepts and the first Authentication Flow (Authorization Code Grant Flow) were introduced. In part 3, we look at the remaining Authentication Flows (Implicit Flow and Hybrid Flow) and some other features of the OIDC specification.
Read article: SAML2 vs JWT: Understanding OpenID Connect Part 3This post continues our discussion of OpenID Connect (OIDC). We look at one of the three Authentication Flows defined by the OIDC spec — the Authorization Code Grant Flow.
Read article: SAML2 vs JWT: Understanding OpenID Connect Part 2This post was originally published as “Design Principles for Seamless User Authentication” on the Apigee Blog.
Read article: Design Principles for Seamless User AuthenticationThis post was originally published as “Protecting Server Resources Hosting Unauthenticated APIs” on the Levvel Blog.
Read article: Protecting Server Resources Hosting Unauthenticated APIsThe XML DSig specification is used to provide digital signature functionality to XML Documents. It is is used by numerous other specs such as WS-Security and SAML2. This blog entry will describe how digital signatures work with an X509 private/public key pair.
Read article: XML Digital SignaturesI’ve talked about authentication many times on ThinkMiddleware.com. It recently occurred to me that I have never devoted a blog post to defining authentication. I’ve had a section on the subject in a couple of different places, but I wanted to have an article to reference from other posts. So, here…
Read article: What is Authentication?I generally recommend to clients that DataPower RBM (Role-Based Management) be configured to perform authentication and authorization of DataPower administrators and developers with LDAP. In particular, whatever respository serves as the central repository of user information should be used (of…
Read article: RBM–Administrative Access & Security for DataPower
