Using Curl With SPNEGO
CloudsStormsSunsetsSunrises / Karsun Designs Recently, I had to setup a SPNEGO example to demonstrate a Kerberos identity integration. The details[…]
Read moreTag: Authentication
Static Credentials Must Not Be Used In The Browser
Authentication is described in this post. Modern business web applications tend to be a collage of service calls to numerous[…]
Read moreAPI Gateways and Multiple Consumer Types
Front / Mark Wilson Sometimes at client sites, I see a separation of APIs advertised on an API Gateway based[…]
Read moreKerberos and Windows Security: Delegation
Nature Art / mynikfoto In this next post in the Kerberos and Windows Security Series, we are going to explore[…]
Read moreOAuth2 Access Tokens vs API Keys — Using JWTs
Ankor Wat / Rob Tiggelman There are several approaches to securing APIs. Every API Gateway vendor supports the same core[…]
Read moreIdentity Protocols, Hosted Login UIs, and Custom Login UIs
There are many ways to implement user authentication in a modern application (mobile, desktop, tablet, web, etc). I have previously[…]
Read moreRed Hat SSO v7.1 OAuth2 Resource Owner Password Credential Grant Support
Patterns / New Media Consortium In this post, we will look at an example of the OAuth2 Resource Owner Password[…]
Read more
Understanding WS-Federation — Passive Requestor Profile
There are several identity protocols that are commonly supported by Identity Providers today — OAuth2, OAuth2 Token Exchange, OIDC, SAML2 Browser Profile,[…]
Read more
Authentication vs. Federation vs. SSO
Authentication. Federation. Single Sign On (SSO). I’ve mentioned these concepts many times. I haven’t actually formally defined what each of[…]
Read more
How To Submit Your Security Tokens to an API Provider, Pt. 2
This post was originally published as “How to Submit Tokens to an API Provider, Pt 2” on the Apigee Blog.[…]
Read more