February 2014 archive
These articles keep their original February 2014 web addresses. Each one has been rewritten from scratch in 2026 to reflect current standards and practice.
Topics: Authorization · Cloud computing · Events & community · General · Identity & access management · Federation · Information security · Mobile security · Social login · News · Technical · Archives
- Federation
Using an LDAP Attribute Store in AD FS
How to add an LDAP attribute store to AD FS, connect it to AD LDS or another directory, and use it in claim rules for attributes AD does not hold.
- Authorization
The State Parameter in OAuth 2.0: CSRF, PKCE and RFC 9700
Why OAuth 2.0's state parameter exists, the CSRF attack it stops, how to generate and check it, and how state, PKCE and nonce divide the work under RFC 9700.