tag: sts
STS (security token service)
Security token services: the component that issues, validates and exchanges tokens, from WS-Trust STSes to OAuth token exchange.
Articles
- Federation
SP-Initiated SSO on .NET: From WIF to Modern Libraries
How service provider initiated sign-in works, why Windows Identity Foundation only covered WS-Federation, and the options for SAML 2.0 and OIDC on ASP.NET Core.
- Cloud computing
Calling On-Premises Web Services From the Cloud, Securely
How cloud apps can call web services that still live in your data center: gateways, mTLS, token exchange and why you should not just open a firewall port.
Guides
- Topic guide
The social corridor: identity brokering explained
How an identity broker sits between apps and many identity providers, turning social logins, enterprise SAML and OIDC into one consistent token.
- Platform category
Other tools in the identity stack
Supporting tools around IAM: directories, PKI and certificate management, secrets managers, HSMs and KMS, privileged access and testing tools.