cloudnative wiki
Search
Search
Dark mode
Light mode
Explorer
Tag: authentication
47 items with this tag.
Jun 13, 2026
Identity & Authentication — OIDC, JWT, OAuth, SAML
authentication
identity
oidc
oauth
jwt
saml
sso
federation
curriculum
Jun 13, 2026
Capstone C.1 — Keycloak Reference Lab: Multi-Client, SSO, and JWKS Rotation
authentication
capstone
keycloak
docker
oidc
oauth2
pkce
sso
saml
jwks
Jun 13, 2026
Capstone C.2 — Identity Incident Tabletop: 3 Realistic Scenarios
authentication
capstone
incident-response
tabletop
security
breach
disaster-recovery
runbook
Jun 13, 2026
Capstone — Keycloak Reference Lab & Incident Tabletop
authentication
capstone
keycloak
lab
incident-response
tabletop
Jun 13, 2026
0.1 — Cryptographic Building Blocks for Identity
authentication
stage-0
cryptography
hmac
rsa
ecdsa
eddsa
hashing
Jun 13, 2026
0.2 — Encoding, Signing, and Verification Demystified
authentication
stage-0
encoding
base64
base64url
signing
verification
jcs
signature-malleability
Jun 13, 2026
0.3 — HTTP & TLS Foundations Every Auth Engineer Must Know
authentication
stage-0
http
tls
mtls
cookies
cors
samesite
preflight
Jun 13, 2026
Stage 0 — Primitives: Crypto, Encoding, HTTP/TLS
authentication
stage-0
primitives
cryptography
tls
http
Jun 13, 2026
1.1 — JWT Anatomy: Header.Payload.Signature
authentication
stage-1
jwt
jose
claims
jti
kid
Jun 13, 2026
1.2 — JWT Algorithms: HS/RS/ES/PS/EdDSA
authentication
stage-1
jwt
algorithms
hs256
rs256
es256
eddsa
performance
Jun 13, 2026
1.3 — JWT Validation: The 7 Checks
authentication
stage-1
jwt
validation
security
jti-denylist
audience
issuer
Jun 13, 2026
1.4 — JWT Lifecycle: Issuance, Rotation, Revocation, Replay Protection
authentication
stage-1
jwt
lifecycle
rotation
revocation
refresh-tokens
replay-protection
denylist
Jun 13, 2026
1.5 — JWS/JWE/JWK/JWKS: The JOSE Family
authentication
stage-1
jose
jws
jwe
jwk
jwks
rotation
encryption
Jun 13, 2026
Stage 1 — JWT Deep Dive
authentication
stage-1
jwt
jose
jws
jwe
jwk
jwks
Jun 13, 2026
2.1 — OAuth 2.0 Fundamentals: What It Is, What It Isn't
authentication
stage-2
oauth
oauth2
authorization
framework
rfc6749
Jun 13, 2026
2.2 — Authorization Code + PKCE: The Workhorse
authentication
stage-2
oauth
authorization-code
pkce
rfc7636
csrf
state-parameter
Jun 13, 2026
2.3 — Client Credentials, ROPC, Implicit (and Why to Avoid)
authentication
stage-2
oauth
client-credentials
ropc
implicit
device-code
m2m
Jun 13, 2026
2.4 — Token Lifecycles: Access, Refresh, DPoP
authentication
stage-2
oauth
tokens
dpop
mtls
refresh-rotation
sender-constrained
Jun 13, 2026
2.5 — Token Introspection (RFC 7662) & Revocation (RFC 7009)
authentication
stage-2
oauth
oauth2
introspection
revocation
rfc7662
rfc7009
tokens
Jun 13, 2026
2.6 — OAuth 2.1: The Definitive Consolidation
authentication
stage-2
oauth
oauth2
oauth2-1
pkce
security
rfc6749bis
Jun 13, 2026
Stage 2 — OAuth 2.0
authentication
stage-2
oauth
oauth2
pkce
dpop
authorization
Jun 13, 2026
3.1 — OpenID Connect (OIDC) Fundamentals
authentication
stage-3
oidc
openid
identity
jwt
id-token
tokens
Jun 13, 2026
3.2 — OIDC Flows: Authorization Code, Hybrid, and Implicit
authentication
stage-3
oidc
pkce
hybrid-flow
implicit-flow
response-mode
security
Jun 13, 2026
3.3 — Claims & sub Discipline: Designing Resilient Identity Schemas
authentication
stage-3
oidc
claims
sub
identity
multi-tenant
ppid
Jun 13, 2026
3.4 — Discovery & Dynamic Client Registration
authentication
stage-3
oidc
discovery
well-known
dynamic-registration
rfc7591
Jun 13, 2026
3.5 — Session Management & Logout: Front-Channel, Back-Channel, and RP-Initiated
authentication
stage-3
oidc
logout
session-management
back-channel
front-channel
tokens
Jun 13, 2026
Stage 3 — OpenID Connect (OIDC)
authentication
stage-3
oidc
openid
sso
identity
Jun 13, 2026
4.1 — SSO Patterns: SP-Initiated, IdP-Initiated, and Federation Architectures
authentication
stage-4
sso
federation
sp-initiated
idp-initiated
jit
provisioning
Jun 13, 2026
4.2 — SAML 2.0 Deep Dive: Assertions, XMLDSig, and OIDC Interoperability
authentication
stage-4
saml
saml2
xml
xmldsig
enterprise
federation
Jun 13, 2026
4.3 — SCIM 2.0: Automated User Provisioning & Deprovisioning
authentication
stage-4
scim
scim2
provisioning
deprovisioning
rfc7643
rfc7644
enterprise
Jun 13, 2026
4.4 — Multi-Tenant Identity Architecture: B2B vs B2C Patterns
authentication
stage-4
multi-tenant
b2b
b2c
federation
rbac
rebac
tenancy
Jun 13, 2026
4.5 — IdP Vendor Comparison: Cognito, Entra, Auth0, Okta, Keycloak, and WorkOS
authentication
stage-4
idp
cognito
auth0
okta
keycloak
workos
entra
comparison
Jun 13, 2026
4.6 — B2B Federation & Trust Frameworks: OpenID Federation 1.0
authentication
stage-4
federation
b2b
trust-frameworks
openid-federation
edugain
Jun 13, 2026
Stage 4 — Federation, SSO, SAML 2.0, B2B
authentication
stage-4
sso
federation
saml
scim
b2b
b2c
multi-tenant
Jun 13, 2026
5.1 — The Top 12 OAuth/OIDC/JWT Attacks: Exploit Mechanics & Defense
authentication
stage-5
security
attacks
oauth-attacks
jwt-attacks
pkce
csrf
idor
hardening
Jun 13, 2026
5.2 — Token Storage & Side-Channel Leaks: Browser, Mobile, and BFF Architectures
authentication
stage-5
security
storage
bff
xss
csrf
cookies
mobile
keychain
Jun 13, 2026
5.3 — Cryptographic Hardening & Zero-Downtime Key Rotation
authentication
stage-5
security
cryptography
jwks
key-rotation
rs256
es256
eddsa
incident-response
Jun 13, 2026
5.4 — Audit, Logging, and SIEM Detection for Identity Systems
authentication
stage-5
security
logging
audit
siem
soc2
wazuh
splunk
detection-engineering
Jun 13, 2026
Stage 5 — Security, Attacks, Hardening
authentication
stage-5
security
attacks
hardening
audit
siem
threat-model
Jun 13, 2026
6.1 — HA Identity: Multi-Region Active/Active & Disaster Recovery
authentication
stage-6
ha
multi-region
disaster-recovery
rto
rpo
architecture
tier-0
Jun 13, 2026
6.2 — Performance: Caching, Edge Auth, and Cost Optimization
authentication
stage-6
performance
edge-auth
caching
jwks
cloudflare-workers
lambda-edge
opa
Jun 13, 2026
6.3 — Zero-Trust & Workload Identity: SPIFFE/SPIRE and Multi-Cloud Federation
authentication
stage-6
zero-trust
workload-identity
spiffe
spire
mtls
oidc-federation
kubernetes
Jun 13, 2026
6.4 — Emerging Standards: DPoP, PAR, RAR, FAPI 2.0, and OID4VCI
authentication
stage-6
standards
dpop
par
rar
fapi
oid4vci
passkeys
webauthn
Jun 13, 2026
Stage 6 — Production, Scale, Frontier
authentication
stage-6
ha
performance
zero-trust
spiiffe
dpop
par
fapi
oid4vci
Jun 09, 2026
L07 — Security
kubernetes
k8s
security
rbac
pss
authentication
encryption
compliance
May 17, 2026
Authentication Patterns
eks
security
access
authentication
Jan 30, 2026
SAML
architecture
authentication
saml