The Twobo blog, page 5
Articles 25 to 28 of 28.
Topics: Authorization · Cloud computing · Events & community · General · Identity & access management · Federation · Information security · Mobile security · Social login · News · Technical · Archives
- Mobile security
Integrating OAuth With Mobile Apps: The Native App Pattern
How native iOS and Android apps should use OAuth 2.0: system browser, PKCE, claimed HTTPS redirects, secure token storage and what to avoid (embedded webviews).
- Identity & access management
OpenID to OpenID Connect: What Changed and Why It Matters
OpenID 2.0 gave way to OpenID Connect in 2014. What the newer protocol does differently, how ID tokens work and what is left of the old OpenID today.
- Federation
Federation and Entitlement Management: How They Fit Together
Federation tells an app who the user is; entitlement management decides what they may do. How SAML, OIDC, SCIM and policy engines divide the work.
- Cloud computing
Calling On-Premises Web Services From the Cloud, Securely
How cloud apps can call web services that still live in your data center: gateways, mTLS, token exchange and why you should not just open a firewall port.