Identity & access management
The core of IAM: who users are, how they sign in, how accounts get created and removed, and how the standards connect.
Subtopics: Federation (6)
Topics: Authorization · Cloud computing · Events & community · General · Identity & access management · Federation · Information security · Mobile security · Social login · News · Technical · Archives
- Authorization
XACML With OpenID Connect, SAML, OAuth and SCIM: Who Does What
Five identity standards, five jobs: SAML and OIDC authenticate, OAuth delegates API access, SCIM provisions accounts and XACML evaluates authorization policies.
- Cloud computing
Extending Your IAM to Cloud Apps: SSO, Provisioning, Reviews
A practical plan to bring SaaS apps under your identity program: federate sign-in, automate provisioning with SCIM, review access and handle the apps that resist.
- Identity & access management
OpenID to OpenID Connect: What Changed and Why It Matters
OpenID 2.0 gave way to OpenID Connect in 2014. What the newer protocol does differently, how ID tokens work and what is left of the old OpenID today.
- Cloud computing
Calling On-Premises Web Services From the Cloud, Securely
How cloud apps can call web services that still live in your data center: gateways, mTLS, token exchange and why you should not just open a firewall port.