Introduction In part 1 we looked at OAuth 2.0, and OIDC token signatures, trust, and integrity. This second part is about implementing data confidentiality. This is where we look at token encryption. Encrypting tokens is not always exercised and it may well be something that is overlooked because of the added…

Wouldn’t it be great to see a pop-up message telling you that your other existing sessions would be terminated if you proceeded to login sometimes (Figure 1)? If you have looked at ForgeRock AM 6.5 session management behaviours you have found that AM supports session quotas, and there are four…

Introduction Identity standards have been streamlined and made more accessible. OAuth 2.0 and OIDC (OpenID Connect) offer many options to transfer personal data across internet services. This is very popular with social media but also on-line retail, health, banking, or in other words, anything online. …