Trending

#oidc

Latest posts tagged with #oidc on Bluesky

Latest Top
Trending

Posts tagged #oidc

Post image

Self-hosted Tailscale: веб-интерфейс и вход без паролей www.juev.org/2026/03/13/hea…
#headscale #headplane #pocketid #oidc

0 1 0 0
Preview
Actions OIDC tokens now support repository custom properties - GitHub Changelog GitHub Actions OpenID Connect (OIDC) tokens now support repository custom properties as claims. Additionally, a new settings page is available in public preview, making it easy to configure OIDC token...

This is a big one for cloud admins in big organizations!!!

No more hardcoded repo names in IAM role trust policy

Just tag the GitHub repos and use ABAC

#DevOps #DevSecOps #GitHub #CloudSecurity #IAM #OIDC

github.blog/changelog/20...

1 1 0 0
Preview
#security #cybersecurity #entraid #oidc #bugbounty #microsoftsecurity #community #meetup #sigmatechnology #wemaketechnologyusable #norway | Robert Eriksson Great evening at the Microsoft Security User Group Norway × Security Champions Norway meetup yesterday! 🌃 Huge thanks to Cody Burkard, Nora Tomas, and Sti͛an Kvå̔lshаgen for insightful talks-from OID...

Great evening at the Microsoft Security User Group Norway × Security Champions Norway meetup yesterday! 🌃

🔗 www.linkedin.com/posts/roberi...

#Security #CyberSecurity #EntraID #OIDC #BugBounty #MicrosoftSecurity #Community #Meetup #MSUGN #SigmaTechnology #WeMakeTechnologyUsable #Norway

1 0 0 0
Preview
Invite Guest users in a Entra ID Multi-tenant setup This post looks at implementing a guest user invite in a cross tenant setup. This is useful when creating partner tenants using an Entra ID MAU license for all partner guests and members. This make…

Blogged: Invite Guest users in a Entra ID Multi-tenant setup

damienbod.com/2026/03/09/i...

#graph #entra #mau #identity #iam #entraid #oauth #openidconnect #oidc #security

2 0 0 0
Post image

Разворачиваем self-hosted Matrix: Synapse + OIDC + LiveKit + подписанные обновления Привет. Мне стало интересно, насколько реал...

#Matrix #Synapse #OIDC #LiveKit #WebRTC #Docker #PostgreSQL #Android #Ed25519 #мессенджеры

Origin | Interest | Match

0 0 0 0
Post image

Разворачиваем self-hosted Matrix: Synapse + OIDC + LiveKit + подписанные обновления Привет. Мне стало интересно, насколько реал...

#Matrix #Synapse #OIDC #LiveKit #WebRTC #Docker #PostgreSQL #Android #Ed25519 #мессенджеры

Origin | Interest | Match

0 0 0 0

OAuth 2.0 and OIDC Explained with UML
A blog by Ronald

The purpose of Open Authorization 2.0 (OAuth 2.0) is...

#dev #softwaredevelopment #Security #OpenIDConnect #UML #Authentication #OAuth2.0 #OIDC #Authorization #SSO #SingleSign-On

jdriven.com/blog/2026/03/OAuth-2.0-E...

1 1 0 0

www.npmjs.com/package/hyouji
released v0.1.1
switch from publish workflow from using #npmtoken to #OIDC

0 0 0 0
Preview
Setup OpenID Connect with Keycloak: A Step-by-Step Guide This blog provides comprehensive guidance on setting up the OpenID Connect Authorization Code Flow using Keycloak. It explains key concepts, prerequisites, and step-by-step instructions to create r…

In this blog, you will learn how to set up the OpenID Connect Authorization Code Flow using Keycloak. You will execute the flow yourself in order to get a better understanding of OIDC. Enjoy!
#security #oidc

0 0 0 0
Preview
GitHub - Cache8063/atauth: AT Protocol (Bluesky) authentication library for Rust, TypeScript, and Node.js AT Protocol (Bluesky) authentication library for Rust, TypeScript, and Node.js - Cache8063/atauth

Been working on at #atproto #OIDC provider for use
in my #homelab that with #Passkey support.

It will handle #OAUTH for apps that are aware.
With a reverse proxy, you can control access to
any app with your at proto identity.

Will also work with your own PDS.

github.com/Cache8063/at...

5 2 3 3
GitHub - damienbod/bff-openiddict-aspnetcore-angular: OpenIddict backend for frontend security using Angular CLI and ASP.NET Core backend OpenIddict backend for frontend security using Angular CLI and ASP.NET Core backend - damienbod/bff-openiddict-aspnetcore-angular

Updated: OpenIddict examples using BFF with Angular and Vue.js

github.com/damienbod/bf...

github.com/damienbod/bf...

Support for passkeys.

#aspnetcore #dotnet #angular #vuejs #bff #openiddict #openidconnect #oidc #passkeys

1 0 0 0
Preview
OpenID Connect入門 | 技術評論社 昨今のアプリケーションの開発では、OpenID Connectを使用してユーザ認証を行うケースが多くなっています。しかし、OpenID Connectについてよく知らずに使用している開発者も多いのではないのでしょうか? きちんと理解しないままOpenID Connectを使用すると、上手く動かないときの調査に時間がかかったり、重大なセキュリティホールを潜ませてしまうリスクにつながります。 OpenID Connectをよく知らない開発者が多い理由として、その難しさがあります。筆者自身、OpenID Con

リトにブックマークを登録しました

リトで参照する #OIDC #OAuth #OpenID #rito.blue

0 0 0 0
Original post on hachyderm.io

In which, Blaine Cook ( @blaine ) explains "What is OAuth?" in the framing not of standards and specifications, nor in technical terms, but instead in this framing:

> “What I need is to understand why it is designed this way, and to see concrete examples of use cases that motivate the design” […]

0 1 0 0
Preview
AI agent authorization with A2A protocol and HashiCorp Vault AI agents also need identity management. Learn how Vault acts as an OIDC provider to control agent-to-agent access using the Agent2Agent (A2A) protocol.

Played around with #Agent2Agent protocol and liked the extended agent card approach to authenticating certain skills. Ended up trying to get it to work with #HashiCorp #Vault as an #OIDC identity provider with some success.

hashicorpengineering.substack.com/p/a2a-vault-...

0 0 0 0

Last day of a long week at the #TIIME conference at #Nikhef in #Amsterdam. Today is all about #OpenID federations.

#tiime2026 #oidfed #oidc

0 0 0 0
Video

When you hear:
> I just vibe-coded and shipped a critical app to prod in 5 min

Missing: AuthN #OAuth #OIDC #Passkeys
No FGA (#OpenID #AuthZEN)
No Zero Trust principles
No multiple PEPs
No JIT AuthN/Z
No standards. No controls. No boundaries
And that’s just the start

The vibe-coded app security:

0 0 0 0
Original post on social.overheid.nl

🔐 SAML heeft ons ver gebracht, maar de wereld is niet meer alleen browser-based. Onze collega Floris Deutekom legt uit waarom OpenID Connect een volwaardig alternatief zou moeten worden voor DigiD, eHerkenning en eIDAS. Niet als vervanging, maar als aanvulling voor moderne, API-gedreven […]

0 1 0 0
https://pocket-id.org/

So I started to look over again for self hosting #oidc #authn. #pocketid, #voidauth, and #hanko are the simplest. All #passkey focused.

Yet still, Pocket ID is by far the easiest to run. Strictly Unix like focused on doing one thing. But doing one thing really well. 😎

0 0 0 0
Preview
Isolate the swiyu Public Beta management APIs using YARP This post looks at hardening the security for the swiyu public beta infrastructure. The generic containers provide both management APIs and wallet APIs which support the OpenID for Verifiable Prese…

Blogged: Secure the swiyu container using a YARP proxy

damienbod.com/2026/02/09/i...

#swiyu #yarp #aspire #aspnetcore #dotnet #identity #network #oauth #openidconnect #oidc

0 0 0 0
a screenshot of the flohmarkt login screen that now features a "use keycloak" button

a screenshot of the flohmarkt login screen that now features a "use keycloak" button

the default login view of keycloak
a username "harrypotter" and a password are entered

the default login view of keycloak a username "harrypotter" and a password are entered

a screenshot of flohmarkt with opened user menu. the menu shows that the harrypotter-user from the former screenshot is now currently logged in.

a screenshot of flohmarkt with opened user menu. the menu shows that the harrypotter-user from the former screenshot is now currently logged in.

today, the #flohmarkt software has witnessed its first login via #OIDC #Oauth2. A keycloak installation served as the identity provider. This marks the beginning of the end of our integrate-more-auth-backends saga!

0 2 0 0
Over the last few days, I've plunged into finally trying to understand how all of this Auth stuff works.

(The landscape of Acronyms is almost as bad as with the CORS one)

These are the videos/sites I would've liked to find from the beginning on:

- The Auth Wiki from Logto, but only as a reference whenever some word is unclear (though that has duplicate pages for some reason)
- Illustrated Guide to OAuth and OIDC (Youtube)
- Everything you ever wanted to know about OAuth and OICD (though the mentions OAuth playground is currently broken, or so it seems)
- OAuth 2 Simplified (Blog Post), which has been expanded into OAuth 2 Simplified (Book)

# Not super-intuitive stuff

- A normal web client shouldn't have a client secret (makes sense if you think about it), and needs to use PKCE
- OAuth is only about _Authorization_ (read: Authorizing the service you're currently logging in to to access some resources on another service), OpenId Connect (OIDC) adds _Authentication_ (read: telling the service you're currently logging into who you are) to this.
- In my head, every service supporting OAuth (or OIDC, at least) also supported something called "Public Sign Up". But that's not the case, most of them actually don't (which makes sense, because _Authorization_ and _Registration_ don't even belong to the same area)

Over the last few days, I've plunged into finally trying to understand how all of this Auth stuff works. (The landscape of Acronyms is almost as bad as with the CORS one) These are the videos/sites I would've liked to find from the beginning on: - The Auth Wiki from Logto, but only as a reference whenever some word is unclear (though that has duplicate pages for some reason) - Illustrated Guide to OAuth and OIDC (Youtube) - Everything you ever wanted to know about OAuth and OICD (though the mentions OAuth playground is currently broken, or so it seems) - OAuth 2 Simplified (Blog Post), which has been expanded into OAuth 2 Simplified (Book) # Not super-intuitive stuff - A normal web client shouldn't have a client secret (makes sense if you think about it), and needs to use PKCE - OAuth is only about _Authorization_ (read: Authorizing the service you're currently logging in to to access some resources on another service), OpenId Connect (OIDC) adds _Authentication_ (read: telling the service you're currently logging into who you are) to this. - In my head, every service supporting OAuth (or OIDC, at least) also supported something called "Public Sign Up". But that's not the case, most of them actually don't (which makes sense, because _Authorization_ and _Registration_ don't even belong to the same area)

I've added a note about (me learning) Auth :)

#Auth #Authn #Authz #OAuth #OIDC #PKCE

0 0 1 0
Preview
Use client assertions in ASP.NET Core using OpenID Connect, OAuth DPoP and OAuth PAR This post looks at implement client assertions in an ASP.NET Core application OpenID Connect client using OAuth Demonstrating Proof of Possession (DPoP) and OAuth Pushed Authorization Requests (PAR…

Blogged: Use client assertions in ASP.NET Core using OpenID Connect, OAuth DPoP and OAuth PAR

damienbod.com/2026/02/02/u...

#dotnet #aspnetcode #oidc #oauth #par #dpop #identity #duende #aspire #oss #iam #swiyu

1 0 0 0
Preview
Scaling with Duende IdentityServer, MCP, and AI Learn to leverage the Model Context Protocol (MCP) to securely scale AI agents and mitigate LLM errors with existing systems using Duende IdentityServer.

Secure your AI agents! 🔐

We're breaking down the Model Context Protocol (#MCP) and show how to use Duende IdentityServer & Dynamic Client Registration (DCR) to add #oidc #oauth to your client.

duende.link/is74b1t #dotnet

0 0 0 0

En synthèse : L'interopérabilité des standards (OAuth 2.1/OIDC) associée à une défense en profondeur (PKCE, eBPF) constitue la base de référence pour toute infrastructure API résiliente en 2026.

#AppSec #Cybersecurity #Architecture #OAuth2 #OIDC #eBPF #ZeroTrust #CloudNative

1 0 0 0
Preview
Force step up authentication in web applications The post shows how to implement a step up authorization using the OAuth 2.0 Step Up Authentication Challenge Protocol RFC 9470. The application uses ASP.NET Core to implement the API, the web appli…

Blogged: Force step up authentication in web applications

damienbod.com/2026/01/26/f...

#aspnetcore #dotnet #blazor #aspire #identity #oauth #oidc #duende #iam #swiyu #eid

0 1 0 0
Build Once, Deploy 3 Ways (Astro on Azure + GitHub Actions)
Build Once, Deploy 3 Ways (Astro on Azure + GitHub Actions) YouTube video by Barbara Forbes | Ba4bes

Build once, deploy three ways: PR preview links, production deploys, and a daily rebuild for fresh content. All from one GitHub Actions pipeline (Astro on Azure).

#GitHubActions#Azure#AzureStaticWebApps#AstroJS#DevOps#CICD#OIDC

youtube.com/shorts/j0AwU...

0 0 0 0
Preview
三井住友海上とあいおいニッセイ同和損保が導入したAuthleteの実績に迫る 三井住友海上とあいおいニッセイ同和損保がAuthleteを導入し、顧客基盤にOIDCを実装。迅速なサポートを受け、6カ月でのシステム構築が完了しました。

三井住友海上とあいおいニッセイ同和損保が導入したAuthleteの実績に迫る #Authlete #OIDC #MS&ADグループ

三井住友海上とあいおいニッセイ同和損保がAuthleteを導入し、顧客基盤にOIDCを実装。迅速なサポートを受け、6カ月でのシステム構築が完了しました。

0 0 0 0
Preview
三井住友海上とあいおいニッセイ同和損保がAuthleteを採用しOIDCを実装! 三井住友海上とあいおいニッセイ同和損保がAuthleteを導入し、短期間でOIDCの実装を完了しました。顧客への安全な情報提供が可能に。

三井住友海上とあいおいニッセイ同和損保がAuthleteを採用しOIDCを実装! #東京都 #千代田区 #MS&ADインシュアランス #Authlete #OIDC

三井住友海上とあいおいニッセイ同和損保がAuthleteを導入し、短期間でOIDCの実装を完了しました。顧客への安全な情報提供が可能に。

0 0 0 0
Preview
Implementing Level of Identification (LoI) with ASP.NET Core Identity and Duende This article explores how to implement Level of Identification (LOI) in an ASP.NET Core application. The solution uses Duende IdentityServer as the OpenID Connect provider and ASP.NET Core Identity…

Blogged: Implementing Level of Identification (LoI) with ASP.NET Core Identity and Duende

damienbod.com/2026/01/18/i...

#aspnetcore #oauth #openid #dotnet #oidc #iam #swiyu #aspire #oss #identity #eid #swiss #bit #gov #loi #loa #blazor #duende

3 1 0 0
Preview
Setup OpenID Connect with Keycloak: A Step-by-Step Guide This blog provides comprehensive guidance on setting up the OpenID Connect Authorization Code Flow using Keycloak. It explains key concepts, prerequisites, and step-by-step instructions to create r…

In this blog, you will learn how to set up the OpenID Connect Authorization Code Flow using Keycloak. You will execute the flow yourself in order to get a better understanding of OIDC. Enjoy!
#security #oidc

1 1 0 0