News, events and community articles
Topics that once ran as news: events, standards milestones and the wider identity community, now written as lasting explainers.
Topics: Authorization · Cloud computing · Events & community · General · Identity & access management · Federation · Information security · Mobile security · Social login · News · Technical · Archives
- Events & community
Planning API Security Training for a Distributed Team
A practical curriculum for teaching API security to developers spread across offices and countries: modules, hands-on labs, formats and how to measure if it worked.
- Events & community
API Security Today: The OWASP API Top 10 in Practice
A talk-style tour of the OWASP API Security Top 10 (2023): broken object level authorization, authentication flaws, resource limits, and fixes that work.
- Social login
Social Login and CIAM Explained
How social login works with OpenID Connect, what customer identity and access management (CIAM) platforms add, and how to handle consent, linking and vendor exits.
- Events & community
The API Economy in the Nordics: Banking, Public Data, Identity
How the Nordic countries became API-heavy: PSD2 open banking, public sector data APIs, bank-issued digital IDs, and what API teams there focus on for security.
- Events & community
Running a BYOD Security Workshop for Your Team
A ready-to-use plan for a half-day BYOD security workshop: who to invite, agenda, exercises, decisions to make in the room and what to send out afterwards.
- Mobile security
BYOD Security: An Identity-First Checklist
A BYOD security checklist built around identity: phishing-resistant MFA, conditional access, work profiles, app protection, token lifetimes, offboarding.