Search

Read this blog post to learn more about reusing OAuth2 Access Tokens for different resources (APIs advertised on an API Gateway). The post looks at some of the supporting concepts that impact how the options work and guides you to a deeper understanding of which approaches you might take.

There are several options for using OAuth 2 access tokens with multiple back-end resources (APIs) with single page applications or mobile applications. Read this post to discover how scope and audience are used to describe resources and how these different options might be implemented.

When an application consumes a variety of different APIs, often all endpoints require an OAuth 2 access token issued from a common Identity Provider, with appropriate security token checks in place. Gain an understanding of three primary approaches for best employing OAuth 2 access tokens.

Easily visualize the various stages of the OAuth 2.0 protocol, one of the most popular authorization standards, with this creative analogy. By breaking it down into 3 phases and 4 fun characters, the author helps you better understand the OAuth flow.

The use of the OAuth2 Authorization Code Grant or OIDC Authorization Code Flow with a Public Client with Single Page Applications (SPAs) is on the rise. Learn why.

Learn how to balance security and convenience with multi-factor authentication (MFA) for a seamless customer experience.