There are many ways to implement user authentication in a modern application (mobile, desktop, tablet, web, etc). I have previously[…]
Read moreTag: Sso

Understanding WS-Federation — Passive Requestor Profile
There are several identity protocols that are commonly supported by Identity Providers today — OAuth2, OAuth2 Token Exchange, OIDC, SAML2 Browser Profile,[…]
Read more
Authentication vs. Federation vs. SSO
Authentication. Federation. Single Sign On (SSO). I’ve mentioned these concepts many times. I haven’t actually formally defined what each of[…]
Read more
JWT Use Cases
This post explores the equivalent JWT use cases corresponding to the five SAML2 use cases that were explored earlier in[…]
Read more
SAML2 Use Cases
The following blog posts discuss SAML2 use cases that have been explored in this series: SAML v2.0 vs JWT: SAML2[…]
Read moreSAML2 vs JWT: Understanding OAuth2
This blog post continues the SAML2 vs JWT series. In the last post, we discussed JSON Web Tokens. Now, we[…]
Read moreSAML v2.0 vs. JWT: SAML2 Single Logout
This post wraps our look at SAML v2.0 Use Cases. The first four use cases are described in “SAML v2.0[…]
Read moreSAML v2.0 vs. JWT Series
This is a list of all the SAML2 vs JWT related posts I have written. This series explores SAML2 use[…]
Read more