Blog archives
All articles, listed by the month of their original address, plus every category and tag.
By month
October 2014
March 2014
February 2014
January 2014
- SP-Initiated SSO on .NET: From WIF to Modern Libraries
- Planning API Security Training for a Distributed Team
- Adding HSTS to PingFederate and Other Jetty-Based Servers
November 2013
- Locking Down a Federation Server: Expose Only What You Must
- API Security Today: The OWASP API Top 10 in Practice
March 2013
February 2013
- The API Economy in the Nordics: Banking, Public Data, Identity
- Running a BYOD Security Workshop for Your Team
January 2013
December 2012
November 2012
October 2012
September 2012
August 2012
- XACML With OpenID Connect, SAML, OAuth and SCIM: Who Does What
- Securing Cloud and Mobile Access With One Identity Layer
- Extending Your IAM to Cloud Apps: SSO, Provisioning, Reviews
- Cloud Security Standards: Frameworks and Identity Specs
July 2012
October 2011
- OAuth 1.0a vs OAuth 2.0: What Still Matters Today
- Implementing Modern OAuth Techniques: PAR, DPoP and More
September 2011
May 2011
April 2011
By category
- Authorization (6)
- Cloud computing (5)
- Events & community (7)
- General (2)
- Identity & access management (4)
- Federation (6)
- Information security (7)
- Mobile security (5)
- Social login (2)
- News & community (12)
- Technical (16)
Tags
- .NET
- AD FS
- Android
- Apache HTTP Server
- API
- APIs and the API economy
- Attacks
- Audit
- Authentication
- Authorization
- Authorization code flow
- Axiomatics
- BYOD
- CA
- CA Technologies
- Cloud
- Cloud computing
- CSRF
- Event
- Events
- Federation
- HSTS
- IAM
- Identity
- Identity management systems
- IIS
- Integration partners
- Janrain
- Jetty
- JWT
- Layer7
- LDAP
- lighttpd
- Microsoft
- Mobile
- Mobile security
- nginx
- Nordic API community
- Nordics
- OAuth
- OAuth 2.0
- Office 365 / Microsoft 365
- OpenID
- OpenID Connect
- Ping Identity
- PingFederate
- Provisioning
- REST
- SAML
- SAML 2.0
- SCIM
- Security
- Single sign-on
- Social networking
- SSL
- STS (security token service)
- TLS
- UnboundID
- WIF
- X (Twitter) API
- XACML