Dear LazyFedi, I'm looking for a #SaaS solution that acts as a kind of #SSO multiplexer.

I have 4 Microsoft tenancies, and I can map users to tenancies by email address. What I want is something that acts as a single frontend to all of them for #SAML / #OpenID logins.

I need this to set up SSO for some of our other SaaS products which only support one provider.

(NB: this needs to be SaaS, UK/EU based. I'm not able to self host anything in this context)

#Authentication #AuthN

So I started to look over again for self hosting #oidc #authn. #pocketid, #voidauth, and #hanko are the simplest. All #passkey focused.

Yet still, Pocket ID is by far the easiest to run. Strictly Unix like focused on doing one thing. But doing one thing really well. 😎

https://pocket-id.org/

Excited to be speaking at @fossasia
🚀 This year, I'm diving deep into Identity and Access Management (#IAM) for #OSS.

All are welcome and I encourage all knowledge levels to attend: Don't be intimidated by "advanced security"! I'm breaking down complex concepts into easy-to-understand explanations, with a historical perspective to give context.

1️⃣Explore #AuthN #AuthZ 🔐
2️⃣ @keycloak Primer 🌐
3️⃣Best Practices for #OSS 🛡️

#FOSSAsia2025

iRODS PAM Interactive Authentication Plugin v0.1.0 is released!

https://irods.org/2024/08/initial-release-of-the-irods-pam-interactive-auth-plugin/

#irods #cpp #authn #pam #openid #kerberos

Interesting attack method. "They are merging, wonder if they screwed up transfer? Yup."

https://www.theregister.com/2024/07/15/squarespace_fingered_for_dns_hijackings/

#squarespace #dns #authn

“At this point I think that #Passkeys will fail in the hands of the general consumer population. We missed our golden chance to eliminate passwords through a desire to capture markets and promote hype.”

https://fy.blackhats.net.au/blog/2024-04-26-passkeys-a-shattered-dream/

Big sadge 😭

#infosec #authn #webauthn

Blogged: Implement a secure web application using nx Standalone Angular and an ASP.NET Core server

https://damienbod.com/2023/09/11/implement-a-secure-web-application-using-nx-standalone-angular-and-an-asp-net-core-server/

#aspnetcore #angular #nx #dotnet #bff #identity #entraid #entra #azuread #aad #microsoftidentity #cookie #oidc #oauth2 #authn

maybe i'm getting old, but i feel the recent trend towards #passwordless with #passkeys / #authn might be a bad idea.

passwords (with all their problems) are a low-tech thing. depending on the people having access to a high-end device with their keys seems highly rich-tech-bro-in-the-western-world