tag: federation
Federation
Identity federation: letting users from one organization or identity provider sign in to applications run by another.
Articles
- Federation
AD FS Claim Rules for LDAP Attribute Stores, Line by Line
A line-by-line guide to AD FS claim rules that query LDAP attribute stores: conditions, issue versus add, store, types, query format, param and escaping rules.
- Federation
Using an LDAP Attribute Store in AD FS
How to add an LDAP attribute store to AD FS, connect it to AD LDS or another directory, and use it in claim rules for attributes AD does not hold.
- Information security
Locking Down a Federation Server: Expose Only What You Must
How to shrink the attack surface of PingFederate or any federation server: separate admin and runtime, allowlist endpoints at the proxy, and add security headers.
- Federation
Microsoft 365 and SAML 2.0: Federating Entra ID With Your IdP
How Microsoft 365 sign-in works through Microsoft Entra ID, when to federate a domain with a third-party SAML 2.0 identity provider, and the settings that matter.
- Cloud computing
Extending Your IAM to Cloud Apps: SSO, Provisioning, Reviews
A practical plan to bring SaaS apps under your identity program: federate sign-in, automate provisioning with SCIM, review access and handle the apps that resist.
- Federation
Federation and Entitlement Management: How They Fit Together
Federation tells an app who the user is; entitlement management decides what they may do. How SAML, OIDC, SCIM and policy engines divide the work.
- Cloud computing
Calling On-Premises Web Services From the Cloud, Securely
How cloud apps can call web services that still live in your data center: gateways, mTLS, token exchange and why you should not just open a firewall port.
Guides
- Topic guide
The social corridor: identity brokering explained
How an identity broker sits between apps and many identity providers, turning social logins, enterprise SAML and OIDC into one consistent token.
- IAM building block
What is identity federation?
How identity federation works: identity providers and relying parties, SAML 2.0 and OpenID Connect trust, metadata, certificates and common pitfalls.
- Product overview
PingFederate overview
What PingFederate is: Ping Identity's self-managed federation server for SAML, OpenID Connect and OAuth. Architecture, uses, hardening and alternatives.
- Product overview
SiteMinder overview
What SiteMinder is: the web access management product Broadcom sells as Symantec SiteMinder. Policy server, agents, SSO sessions and migration paths.