In today’s world, where technology is constantly evolving, it is more important than ever to protect sensitive information from cyber threats. As the administrator of your network, it’s crucial to understand that you bear the responsibility for the security of your users. …

Authentication and authorization are the two terms used most often in the security of web applications. Due to the drawbacks of traditional cookies-based authentication method which makes use of HTTP cookies to authenticate client requests and store session information on the server, JWT tokens were introduced. Whenever you need to…

If you’re new to gRPC (Remote Procedure Call) , then this article is for you! 🎉 These past few days I have been exploring and diving deep into gRPC and I found a lot of interesting things. I will be sharing those things through my writing. In this article, I…

Asgardeo is the new cloud-based identity service(IDaaS) by WSO2. Asgardeo provides several authentication and authorization mechanisms with different open standards. This blog will focus on securing a Java EE web application with Asgardeo using OpenID Connect. For clarity, this guide is structured into several sections. So let’s get started!🍾 🎉 Register an OpenID Connect web app in Asgardeo …

WSO2 Identity Server can be configured to provision users to trusted identity provider using its identity provisioning framework. This trusted identity provider can be Google, Salesforce, Facebook or any other identity provider that supports inbound provisioning. This blog will guide you on how to integrate Google with WSO2 IS to…

Azure Active Directory (Azure AD) is Microsoft’s enterprise cloud-based identity and access management (IAM) solution. Azure AD is the backbone of the Office 365 system, and it can sync with on-premise Active Directory and provide authentication to other cloud-based systems via OAuth. WSO2 identity server has the capability to allow…

OAuth 2.0 is an authorization framework that enables applications to obtain limited access to user accounts on an HTTP service. It works by delegating user authentication to the service that hosts a user account and authorizing third-party applications to access that user account. OAuth 2.0 uses Access Tokens. An Access…

“ OpenID Connect (OIDC) 1.0 is a simple identity layer on top of the OAuth 2.0 protocol. …

Today many business organizations are struggling to provide their employees and customers with the appropriate level of access to the appropriate services at the appropriate time. To better mitigate these risks and resolve organizational inefficiencies, companies must implement proper governance practices and solutions. …