November 2013 archive
These articles keep their original November 2013 web addresses. Each one has been rewritten from scratch in 2026 to reflect current standards and practice.
Topics: Authorization · Cloud computing · Events & community · General · Identity & access management · Federation · Information security · Mobile security · Social login · News · Technical · Archives
- Information security
Locking Down a Federation Server: Expose Only What You Must
How to shrink the attack surface of PingFederate or any federation server: separate admin and runtime, allowlist endpoints at the proxy, and add security headers.
- Events & community
API Security Today: The OWASP API Top 10 in Practice
A talk-style tour of the OWASP API Security Top 10 (2023): broken object level authorization, authentication flaws, resource limits, and fixes that work.