Passwords are of paramount importance in the authentication layer of any digital system. Put simply, a password is a secret phrase to prove a user’s right to gain access to a secured resource or service. A compromise in the security of a digital system can cause a huge negative impact…

Data breaches happen on a daily basis, exposing billions of records of sensitive data. Studies show that the rate of identity-related crime is detonating. Especially with the COVID-19 pandemic, many businesses have been forced to go on remote, and hence more and more chances of personal information available online be…

The SOAP web services used within WSO2 products are termed as admin services. We typically use HTTP basic authentication and session cookies as the authentication mechanism when invoking these admin services. …

Just-in-Time (JIT) provisioning is a popular approach followed in federated identity provisioning. What makes JIT provisioning a widely adapted provisioning approach is the fact that it allows users to be created on-the-fly on the first time the user tries to log in to the system where the user needs to…

Transmission of sensitive information over the internet requires a trustworthy relationship to be established between the client machine and the server. Over the years, network communication security standards have been advancing on identity authentication, integrity and privacy aspects. When browsing the network you may have noticed a lock icon in…

Identity and Access Management (IAM) is becoming more prominent than ever. The concept of managing identity and access securely in a standardized approach is a must expected from enterprises and applications moving towards digitalization. Over the recent decades many protocols and standards for IAM have been introduced. In the world…

WSO2 Identity Server 5.9.0 is just out, offering a spectrum of new features and significant upgrades. The focus of WSO2 Identity Server as an open-source industry leader in the IAM ecosystem is to have support for open standards and to provide flexible CIAM solutions matching the present world demands. In…

In the world of identity management, user provisioning is a common term we often come across. Simply put into words user provisioning is the process of creating, updating, disabling and deleting user accounts in relation to access permissions for resources in one or more systems. In this blog post I’ll…

With the rapid lean towards enterprise digitalization, managing multiple identities linking per user across vast number of applications and services is certainly a tedious task. From user perspective, remembering multiple credentials is not a practical approach. “Identity federation” is the answer for this. So what exactly is this term? In…