Identity Security Blogs

In spite of the popularity of JWTs, their security properties are often misunderstood. To ensure the security of the app, you must fully consider asymmetric signatures, validation beyond signatures, cryptographic key management and more. Learn how to put JWT security best practices into place.

Learn how dynamic authorization, also known as attribute-based access control (ABAC), can be used to prevent online fraud from occurring.

The use of biometric data to identify and authenticate people based on their unique individual characteristics is growing. Risks of biometric data compromise are rare but do exist, and since biometric traits do not change, any compromise is forever. Ping can help keep this information secure.

APIs pose a significant cyber security threat, making API security a critical priority. Learn everything you need to know about API security.

Get everything you need to know about how the OMB’s Zero Trust Memo (M-22-09) impacts identity and what you need to meet its identity requirements.

Learn how account takeover (ATO) fraud in banking and finance can be prevented with multi-factor authentication (MFA) and online fraud prevention tools.

Learn about out-of-band authentication (OOBA) and its role in two-factor authentication (2FA) and multi-factor authentication (MFA).

Learn about privileged account management (PAM) and how it works with identity and access management (IAM) to secure access for privileged accounts.

A form of identity management, web access management (WAM) is a form of identity management that authorizes users to access web applications.