4d ago · 7 min read · Keycloak and PingOne are two prominent solutions in the Identity and Access Management (IAM) space, each catering to different needs and environments. Keycloak is an open-source IAM solution, while PingOne is a fully managed, enterprise-grade IAM pla...
Join discussionMar 16 · 6 min read · Overview When running workloads in Kubernetes, one of the biggest challenges is securely accessing AWS services. If you're using Amazon EKS, the recommended approach is IAM Roles for Service Accounts
Join discussion
Feb 25 · 12 min read · Background Throughout my career advising and implementing cloud infrastructure for clients, few topics generate as much operational anxiety as secret management. I have worked with numerous organizati
Join discussion
Feb 22 · 7 min read · OpenID Connect (OIDC) login flow is the process by which users authenticate themselves using OpenID Connect, a protocol for authentication built on top of OAuth 2.0. In this guide, we'll walk through building complete OIDC login flow URLs in ForgeRoc...
Join discussionFeb 18 · 6 min read · WebAuthn gave us phishing-resistant, device-bound authentication.But devices get lost. Browsers reset. Users switch laptops. Institutions manage identities centrally. That’s where OIDC (Feide) enters — not as a competitor to passwordless, but as stru...
Join discussion
Feb 14 · 6 min read · By this point in the series, we’ve established three things: Passwords are structurally fragile. WebAuthn provides phishing-resistant, device-bound authentication. OpenID Connect provides portable, federated identity. Now comes the harder questi...
Join discussion
Feb 12 · 12 min read · Identity Federation: SAML vs OpenID Connect in 2025 When your engineering team receives the third escalation in a month about users locked out of critical systems because authentication tokens expired during a cross-domain workflow, you're facing mor...
Join discussionFeb 12 · 6 min read · If WebAuthn answers the question: “Can this device prove control of a credential right now?” OpenID Connect answers a different question entirely: “Who is this person across systems, time, and organizations?” Modern authentication systems fail wh...
Join discussion
Jan 25 · 10 min read · In my previous blog, I focused mainly on the theoretical aspects of OAuth 2.0 and OpenID Connect. Now it’s time to bring those concepts into practice. For this blog , I’ve built a dedicated Proof of Concept (POC) to demonstrate a real-world implement...
Join discussion
