The Twobo blog, page 2
Articles 7 to 12 of 28.
Topics: Authorization · Cloud computing · Events & community · General · Identity & access management · Federation · Information security · Mobile security · Social login · News · Technical · Archives
- Information security
Adding HSTS to PingFederate and Other Jetty-Based Servers
How to send Strict-Transport-Security from PingFederate and other Jetty-based servers: response header config files, Jetty rewrite rules, or a reverse proxy.
- Information security
Locking Down a Federation Server: Expose Only What You Must
How to shrink the attack surface of PingFederate or any federation server: separate admin and runtime, allowlist endpoints at the proxy, and add security headers.
- Events & community
API Security Today: The OWASP API Top 10 in Practice
A talk-style tour of the OWASP API Security Top 10 (2023): broken object level authorization, authentication flaws, resource limits, and fixes that work.
- Social login
Social Login and CIAM Explained
How social login works with OpenID Connect, what customer identity and access management (CIAM) platforms add, and how to handle consent, linking and vendor exits.
- Events & community
The API Economy in the Nordics: Banking, Public Data, Identity
How the Nordic countries became API-heavy: PSD2 open banking, public sector data APIs, bank-issued digital IDs, and what API teams there focus on for security.
- Events & community
Running a BYOD Security Workshop for Your Team
A ready-to-use plan for a half-day BYOD security workshop: who to invite, agenda, exercises, decisions to make in the room and what to send out afterwards.