January 2014 archive
These articles keep their original January 2014 web addresses. Each one has been rewritten from scratch in 2026 to reflect current standards and practice.
Topics: Authorization · Cloud computing · Events & community · General · Identity & access management · Federation · Information security · Mobile security · Social login · News · Technical · Archives
- Federation
SP-Initiated SSO on .NET: From WIF to Modern Libraries
How service provider initiated sign-in works, why Windows Identity Foundation only covered WS-Federation, and the options for SAML 2.0 and OIDC on ASP.NET Core.
- Events & community
Planning API Security Training for a Distributed Team
A practical curriculum for teaching API security to developers spread across offices and countries: modules, hands-on labs, formats and how to measure if it worked.
- Information security
Adding HSTS to PingFederate and Other Jetty-Based Servers
How to send Strict-Transport-Security from PingFederate and other Jetty-based servers: response header config files, Jetty rewrite rules, or a reverse proxy.