Latest from Identity Authority

Technical articles, standards guidance, and community insight on IAM, PAM, and Zero Trust.

Promotional banner for the pentest readiness checklist

All Teams3 IAM Architects59 Identity Governance Administrators14 CISOs & Security Leaders14 SecOps Engineers12 PAM Engineers10 IT Governance & Compliance Teams4 Cyber-Risk Analysts3 Directory Services Engineers1

Topics:All3 FIDO & Passkeys46 OAuth & OIDC18 Governance & Compliance11 Authorization Concepts9 Tokens & Sessions6 Identity Lifecycle5 Federation & SSO4 Multi-Factor Methods4 Directory Services3 Privileged Access3 Passwords & Hashing3 Access Control Models2 Zero Trust Architecture2 general1

3 articles in SecOps Engineers · OAuth & OIDC · Clear filtersSort byNewest·Trending

Should You Block Device-Code Authentication Entirely?

OAuth & OIDC

Latest

5 min read

Should You Block Device-Code Authentication Entirely?

The question at hand Your Conditional Access policies probably don t cover device-code authentication . That s a problem because attackers are using Microsoft s OAuth 2.0 device authorization grant fl

For SecOps EngineersRead article

Self-Certifying OpenID4VP and OpenID4VCI: What Teams Get Wrong

OAuth & OIDC

4 min read

Self-Certifying OpenID4VP and OpenID4VCI: What Teams Get Wrong

The OpenID Foundation has launched self-certification for OpenID4VP and OpenID4VCI conformance tests. Some teams will certify quickly, while others will face delays due to preventable errors. The key

For SecOps EngineersRead

OAuth & OIDC

4 min read

When Your Agent Withdraws More Than $10

Understanding the Issue This isn t about a security breach. It s about a common architectural oversight that occurs before incidents happen, when teams deploy agentic systems without using token excha

For SecOps EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now