API Security Blogs

Read this simple step-by-step guide to download a sample app ready to test or customize for login, registration and other identity features. This guide will show you the quick and easy steps you could be doing to add customer identity and access management (CIAM) features to your application.

Discover how to create an effective API security strategy. As API adoption increases, you need API security that builds off of traditional web application security practices but also takes additional steps to discover and stop threats specific to this prime attack vector.

Easily visualize the various stages of the OAuth 2.0 protocol, one of the most popular authorization standards, with this creative analogy. By breaking it down into 3 phases and 4 fun characters, the author helps you better understand the OAuth flow.

Should you build or buy identity for your app? Application teams are in a unique position to build authentication, registration and other services themselves, or purchase a solution. This high-level overview of the pros and cons will help guide you to making the right decision for your application.

Learn how to shore up your API security and help prevent costly data breaches. This article reflects on 16 years of experience implementing API security, shares lessons learned from notorious hacks, and explores the prospect of emerging security patterns leveraging machine learning.

Apigee customers can now easily deploy PingIntelligence for APIs via flow callout and flow hook policies in Apigee Edge.

Complying with Open Banking UK standards can be addressed with Pingfederate, PingAccess, and PingDirectory products. Learn how to enable open banking dynamic client registration with Ping Identity.

Previously, we presented an overview of Identity Gateway and how it fits into your organization’s IAM.

The use of the OAuth2 Authorization Code Grant or OIDC Authorization Code Flow with a Public Client with Single Page Applications (SPAs) is on the rise. Learn why.