tag: sso
Single sign-on
Single sign-on: one authentication event that gives access to many applications, through SAML, OpenID Connect or WS-Federation.
Articles
- Federation
SP-Initiated SSO on .NET: From WIF to Modern Libraries
How service provider initiated sign-in works, why Windows Identity Foundation only covered WS-Federation, and the options for SAML 2.0 and OIDC on ASP.NET Core.
- Mobile security
BYOD Security: An Identity-First Checklist
A BYOD security checklist built around identity: phishing-resistant MFA, conditional access, work profiles, app protection, token lifetimes, offboarding.
- Federation
Microsoft 365 and SAML 2.0: Federating Entra ID With Your IdP
How Microsoft 365 sign-in works through Microsoft Entra ID, when to federate a domain with a third-party SAML 2.0 identity provider, and the settings that matter.
- Cloud computing
Extending Your IAM to Cloud Apps: SSO, Provisioning, Reviews
A practical plan to bring SaaS apps under your identity program: federate sign-in, automate provisioning with SCIM, review access and handle the apps that resist.
- Identity & access management
OpenID to OpenID Connect: What Changed and Why It Matters
OpenID 2.0 gave way to OpenID Connect in 2014. What the newer protocol does differently, how ID tokens work and what is left of the old OpenID today.
Guides
- IAM building block
Authentication: proving who someone is
How authentication works in 2026: knowledge, possession and inherence factors, phishing-resistant MFA, passkeys, NIST assurance levels and service authentication.
- IAM building block
What is identity federation?
How identity federation works: identity providers and relying parties, SAML 2.0 and OpenID Connect trust, metadata, certificates and common pitfalls.
- Platform category
Jump-start: choosing an IAM platform
A step-by-step method for choosing an IAM platform: scenarios, deployment model, standards support, proof of concept and planning your exit.
- Product overview
PingFederate overview
What PingFederate is: Ping Identity's self-managed federation server for SAML, OpenID Connect and OAuth. Architecture, uses, hardening and alternatives.
- Product overview
PingOne overview
What PingOne is: Ping Identity's identity-as-a-service platform for SSO, MFA, risk and orchestration, including the Advanced Identity Cloud.
- Product overview
SiteMinder overview
What SiteMinder is: the web access management product Broadcom sells as Symantec SiteMinder. Policy server, agents, SSO sessions and migration paths.