August 2012 archive
These articles keep their original August 2012 web addresses. Each one has been rewritten from scratch in 2026 to reflect current standards and practice.
Topics: Authorization · Cloud computing · Events & community · General · Identity & access management · Federation · Information security · Mobile security · Social login · News · Technical · Archives
- Authorization
XACML With OpenID Connect, SAML, OAuth and SCIM: Who Does What
Five identity standards, five jobs: SAML and OIDC authenticate, OAuth delegates API access, SCIM provisions accounts and XACML evaluates authorization policies.
- Mobile security
Securing Cloud and Mobile Access With One Identity Layer
Phones, laptops and SaaS apps reach company data from outside the network. How one identity layer with MFA, device signals and conditional access protects them.
- Cloud computing
Extending Your IAM to Cloud Apps: SSO, Provisioning, Reviews
A practical plan to bring SaaS apps under your identity program: federate sign-in, automate provisioning with SCIM, review access and handle the apps that resist.
- Cloud computing
Cloud Security Standards: Frameworks and Identity Specs
Which standards matter for cloud security: CSA Cloud Controls Matrix, ISO/IEC 27001, 27017 and 27018, SOC 2, plus the identity specs (SAML, OIDC, SCIM) behind them.