Self-hosted Tailscale: веб-интерфейс и вход без паролей www.juev.org/2026/03/13/hea…
#headscale #headplane #pocketid #oidc
Latest posts tagged with #oidc on Bluesky
Self-hosted Tailscale: веб-интерфейс и вход без паролей www.juev.org/2026/03/13/hea…
#headscale #headplane #pocketid #oidc
This is a big one for cloud admins in big organizations!!!
No more hardcoded repo names in IAM role trust policy
Just tag the GitHub repos and use ABAC
#DevOps #DevSecOps #GitHub #CloudSecurity #IAM #OIDC
github.blog/changelog/20...
Great evening at the Microsoft Security User Group Norway × Security Champions Norway meetup yesterday! 🌃
🔗 www.linkedin.com/posts/roberi...
#Security #CyberSecurity #EntraID #OIDC #BugBounty #MicrosoftSecurity #Community #Meetup #MSUGN #SigmaTechnology #WeMakeTechnologyUsable #Norway
Blogged: Invite Guest users in a Entra ID Multi-tenant setup
damienbod.com/2026/03/09/i...
#graph #entra #mau #identity #iam #entraid #oauth #openidconnect #oidc #security
Разворачиваем self-hosted Matrix: Synapse + OIDC + LiveKit + подписанные обновления Привет. Мне стало интересно, насколько реал...
#Matrix #Synapse #OIDC #LiveKit #WebRTC #Docker #PostgreSQL #Android #Ed25519 #мессенджеры
Origin | Interest | Match
Разворачиваем self-hosted Matrix: Synapse + OIDC + LiveKit + подписанные обновления Привет. Мне стало интересно, насколько реал...
#Matrix #Synapse #OIDC #LiveKit #WebRTC #Docker #PostgreSQL #Android #Ed25519 #мессенджеры
Origin | Interest | Match
OAuth 2.0 and OIDC Explained with UML
A blog by Ronald
The purpose of Open Authorization 2.0 (OAuth 2.0) is...
#dev #softwaredevelopment #Security #OpenIDConnect #UML #Authentication #OAuth2.0 #OIDC #Authorization #SSO #SingleSign-On
jdriven.com/blog/2026/03/OAuth-2.0-E...
www.npmjs.com/package/hyouji
released v0.1.1
switch from publish workflow from using #npmtoken to #OIDC
In this blog, you will learn how to set up the OpenID Connect Authorization Code Flow using Keycloak. You will execute the flow yourself in order to get a better understanding of OIDC. Enjoy!
#security #oidc
Been working on at #atproto #OIDC provider for use
in my #homelab that with #Passkey support.
It will handle #OAUTH for apps that are aware.
With a reverse proxy, you can control access to
any app with your at proto identity.
Will also work with your own PDS.
github.com/Cache8063/at...
Updated: OpenIddict examples using BFF with Angular and Vue.js
github.com/damienbod/bf...
github.com/damienbod/bf...
Support for passkeys.
#aspnetcore #dotnet #angular #vuejs #bff #openiddict #openidconnect #oidc #passkeys
In which, Blaine Cook ( @blaine ) explains "What is OAuth?" in the framing not of standards and specifications, nor in technical terms, but instead in this framing:
> “What I need is to understand why it is designed this way, and to see concrete examples of use cases that motivate the design” […]
Played around with #Agent2Agent protocol and liked the extended agent card approach to authenticating certain skills. Ended up trying to get it to work with #HashiCorp #Vault as an #OIDC identity provider with some success.
hashicorpengineering.substack.com/p/a2a-vault-...
Last day of a long week at the #TIIME conference at #Nikhef in #Amsterdam. Today is all about #OpenID federations.
#tiime2026 #oidfed #oidc
When you hear:
> I just vibe-coded and shipped a critical app to prod in 5 min
Missing: AuthN #OAuth #OIDC #Passkeys
No FGA (#OpenID #AuthZEN)
No Zero Trust principles
No multiple PEPs
No JIT AuthN/Z
No standards. No controls. No boundaries
And that’s just the start
The vibe-coded app security:
🔐 SAML heeft ons ver gebracht, maar de wereld is niet meer alleen browser-based. Onze collega Floris Deutekom legt uit waarom OpenID Connect een volwaardig alternatief zou moeten worden voor DigiD, eHerkenning en eIDAS. Niet als vervanging, maar als aanvulling voor moderne, API-gedreven […]
So I started to look over again for self hosting #oidc #authn. #pocketid, #voidauth, and #hanko are the simplest. All #passkey focused.
Yet still, Pocket ID is by far the easiest to run. Strictly Unix like focused on doing one thing. But doing one thing really well. 😎
Blogged: Secure the swiyu container using a YARP proxy
damienbod.com/2026/02/09/i...
#swiyu #yarp #aspire #aspnetcore #dotnet #identity #network #oauth #openidconnect #oidc
a screenshot of the flohmarkt login screen that now features a "use keycloak" button
the default login view of keycloak a username "harrypotter" and a password are entered
a screenshot of flohmarkt with opened user menu. the menu shows that the harrypotter-user from the former screenshot is now currently logged in.
today, the #flohmarkt software has witnessed its first login via #OIDC #Oauth2. A keycloak installation served as the identity provider. This marks the beginning of the end of our integrate-more-auth-backends saga!
Over the last few days, I've plunged into finally trying to understand how all of this Auth stuff works. (The landscape of Acronyms is almost as bad as with the CORS one) These are the videos/sites I would've liked to find from the beginning on: - The Auth Wiki from Logto, but only as a reference whenever some word is unclear (though that has duplicate pages for some reason) - Illustrated Guide to OAuth and OIDC (Youtube) - Everything you ever wanted to know about OAuth and OICD (though the mentions OAuth playground is currently broken, or so it seems) - OAuth 2 Simplified (Blog Post), which has been expanded into OAuth 2 Simplified (Book) # Not super-intuitive stuff - A normal web client shouldn't have a client secret (makes sense if you think about it), and needs to use PKCE - OAuth is only about _Authorization_ (read: Authorizing the service you're currently logging in to to access some resources on another service), OpenId Connect (OIDC) adds _Authentication_ (read: telling the service you're currently logging into who you are) to this. - In my head, every service supporting OAuth (or OIDC, at least) also supported something called "Public Sign Up". But that's not the case, most of them actually don't (which makes sense, because _Authorization_ and _Registration_ don't even belong to the same area)
I've added a note about (me learning) Auth :)
#Auth #Authn #Authz #OAuth #OIDC #PKCE
Blogged: Use client assertions in ASP.NET Core using OpenID Connect, OAuth DPoP and OAuth PAR
damienbod.com/2026/02/02/u...
#dotnet #aspnetcode #oidc #oauth #par #dpop #identity #duende #aspire #oss #iam #swiyu
Secure your AI agents! 🔐
We're breaking down the Model Context Protocol (#MCP) and show how to use Duende IdentityServer & Dynamic Client Registration (DCR) to add #oidc #oauth to your client.
duende.link/is74b1t #dotnet
En synthèse : L'interopérabilité des standards (OAuth 2.1/OIDC) associée à une défense en profondeur (PKCE, eBPF) constitue la base de référence pour toute infrastructure API résiliente en 2026.
#AppSec #Cybersecurity #Architecture #OAuth2 #OIDC #eBPF #ZeroTrust #CloudNative
Blogged: Force step up authentication in web applications
damienbod.com/2026/01/26/f...
#aspnetcore #dotnet #blazor #aspire #identity #oauth #oidc #duende #iam #swiyu #eid
Build once, deploy three ways: PR preview links, production deploys, and a daily rebuild for fresh content. All from one GitHub Actions pipeline (Astro on Azure).
#GitHubActions #Azure #AzureStaticWebApps #AstroJS #DevOps #CICD #OIDC
youtube.com/shorts/j0AwU...
三井住友海上とあいおいニッセイ同和損保が導入したAuthleteの実績に迫る #Authlete #OIDC #MS&ADグループ
三井住友海上とあいおいニッセイ同和損保がAuthleteを導入し、顧客基盤にOIDCを実装。迅速なサポートを受け、6カ月でのシステム構築が完了しました。
三井住友海上とあいおいニッセイ同和損保がAuthleteを採用しOIDCを実装! #東京都 #千代田区 #MS&ADインシュアランス #Authlete #OIDC
三井住友海上とあいおいニッセイ同和損保がAuthleteを導入し、短期間でOIDCの実装を完了しました。顧客への安全な情報提供が可能に。