The Twobo blog, page 4
Articles 19 to 24 of 28.
Topics: Authorization · Cloud computing · Events & community · General · Identity & access management · Federation · Information security · Mobile security · Social login · News · Technical · Archives
- Mobile security
Securing Cloud and Mobile Access With One Identity Layer
Phones, laptops and SaaS apps reach company data from outside the network. How one identity layer with MFA, device signals and conditional access protects them.
- Cloud computing
Extending Your IAM to Cloud Apps: SSO, Provisioning, Reviews
A practical plan to bring SaaS apps under your identity program: federate sign-in, automate provisioning with SCIM, review access and handle the apps that resist.
- Cloud computing
Cloud Security Standards: Frameworks and Identity Specs
Which standards matter for cloud security: CSA Cloud Controls Matrix, ISO/IEC 27001, 27017 and 27018, SOC 2, plus the identity specs (SAML, OIDC, SCIM) behind them.
- Events & community
Identity Conferences Worth Following, and How to Get Value
The identity and access management events that shape the field, from Identiverse and EIC to IIW and IETF meetings, and how to pick the right one for your team.
- Authorization
OAuth 1.0a vs OAuth 2.0: What Still Matters Today
OAuth 1.0a signed every request; OAuth 2.0 relies on TLS and bearer tokens. How the two differ, where 1.0a survives and how to call a 1.0a API correctly.
- Authorization
Implementing Modern OAuth Techniques: PAR, DPoP and More
The OAuth 2.0 extensions worth adopting now: PKCE everywhere, pushed authorization requests, DPoP, issuer identification, resource indicators and token exchange.