#openid-connect

OAuth2 y OpenID Connect: la diferencia clave

En el artículo sobre JWT vimos cómo un servidor firma un token para reconocer a un usuario que ha hecho login directamente contra tu propia…

OAuth 2.0 & OpenID Connect — Full Authentication Flow Deep Dive

Skip to content

Keycloak Deep Dive: Architecting Scalable Identity and Access Management Systems

Introduction

SSO in Umbraco 17: Azure AD Back Office Login with OpenID Connect

A step-by-step guide to wiring up Azure Active Directory as an external login provider for the Umbraco back office — with auto-linking…

Why third-party apps never need your password — OAuth, OpenID Connect, and SSO explained

When you click “Sign in with Google” on some app you just downloaded, something interesting happens. The app gets access to your data. Your…

How OpenID Connect Extends OAuth 2.0?

Prequisites

Modernise Active Directory Login with OpenID Connect, SAML 2.0 and MFA using FoxIDs

Active Directory is still the authoritative user directory in many organisations. Users, passwords and group memberships often already live…

Identity Management 101: Part 3 Shattering the Hub: The Rise of Decentralized Identity

In Part 2, we took a deep dive into the “Authorization Dance” of OAuth 2.0 and saw how OpenID Connect (OIDC) acts as the secure ID badge of…

Understanding the Basics of Apache mod_auth_openidc with Microsoft Entra ID

Modern enterprise applications require secure authentication systems that are scalable, centralized, and easy to manage. Traditionally…

WSO2 API Manager & Microsoft Entra ID SSO with OpenID Connect

Guide: Configure Federated OIDC-Based SSO Between Microsoft Entra ID and WSO2 API Manager with Claim & Role Mapping.

Introduction to OAuth DPoP

Introduction:

How to Set Up SSO with Google for Centralized Login

Single sign-on (SSO) simplifies and secures authentication across platforms. By integrating Google Cloud Identity or Google Workspace as an…

Refresh Tokens in Keycloak

Complete Guide for Beginners

Why SAML Still Used ?

Isn’t OpenID a better solution in 2026

Securing Everything: Mapping the Right Identity and Access Protocol (OIDC, OAuth2, and SAML) to the…

1. OVERVIEW

OAuth 2.0 vs OpenID Connect (OIDC): Best Practices & Security in 2025

OAuth 2.0 and OIDC in 2025: choose the Authorization Code + PKCE, secure tokens with DPoP/mTLS, rotate refresh tokens, and follow OAuth…

When Single Sign-On Fails for SPAs : How Browser Privacy Broke Seamless Login

Modern browsers changed how cross-site cookies work — here’s what really happens behind the scenes, and how we redesigned our architecture…

Sender-Constrained DPoP + JAR/PAR OIDC Flow (Browser to RP): Full Technical Design

1. Executive Summary

Tracing Identity Back to Yadis: The Discovery Protocol Behind OpenID 🧭

If you’ve ever logged into a website using “Sign in with Google” or “Sign in with Facebook,” you’ve experienced the magic of federated…

Implementing OpenID Connect Authentication in Nuxt 3 (SSR): A Complete Guide

#oidc #nuxt3 #serversiderendering

Azure AD B2C: Secure Confidential Grant Redemption with Client Secrets in Angular

ASP.NET Core ilə Google SSO Implementasiyası

Bu məqalədə ASP.NET Core istifadə edərək Google Single Sign-On (SSO) implementasiyasını izah edəcəyik. SSO, istifadəçilərə bir dəfə…

OAuth/OIDC Implementation Mistakes!

How We Overcame Overlooked Details and Breaking Changes in the Specifications

Integrating Keycloak with a Next.js Frontend and Securing API Calls via Kong API Gateway

In an era of increasing reliance on APIs and microservices, securing communication between clients and backend services has become a…

SSO: Single Sign-On & Authentication

Single sign-on (SSO) is a session and user authentication service that permits a user to use one set of login credentials—for example, a…

Janssen + Mod Auth openidc module to Test OpenID Connect Single Sign-on (SSO) and Single Log Out…

An overview of Jans server to test single sign-on / logout with mod_auth_openid.

Enable OpenID Connect in the Kong Dev Portal with Gluu

By default you can self signup with Kong developer portal and once admin approves your account, you can login to developer portal with your…

[討論] EHR互通架構下 身分驗證流程與格式說明

當資源擁有者（Resource Owner）上傳PHR資料並授權給醫療服務端，如：個案管理師（EHR client）; 對於資源儲存庫 （Resource server）而言，驗證提出請求者為誰？ 是首要任務。

[討論] OAuth Access Token- JWT 使用欄位建議

目前國內FHIR相關應用逐步發展，但新的身分認證與授權機制尚未到位

[筆記] OpenID Connect (OIDC) 身份認證

應用範圍