Feb 25 · 12 min read · Background Throughout my career advising and implementing cloud infrastructure for clients, few topics generate as much operational anxiety as secret management. I have worked with numerous organizati
Join discussion
Feb 22 · 7 min read · OpenID Connect (OIDC) login flow is the process by which users authenticate themselves using OpenID Connect, a protocol for authentication built on top of OAuth 2.0. In this guide, we'll walk through building complete OIDC login flow URLs in ForgeRoc...
Join discussionFeb 18 · 6 min read · WebAuthn gave us phishing-resistant, device-bound authentication.But devices get lost. Browsers reset. Users switch laptops. Institutions manage identities centrally. That’s where OIDC (Feide) enters — not as a competitor to passwordless, but as stru...
Join discussion
Feb 14 · 6 min read · By this point in the series, we’ve established three things: Passwords are structurally fragile. WebAuthn provides phishing-resistant, device-bound authentication. OpenID Connect provides portable, federated identity. Now comes the harder questi...
Join discussion
Feb 12 · 12 min read · Identity Federation: SAML vs OpenID Connect in 2025 When your engineering team receives the third escalation in a month about users locked out of critical systems because authentication tokens expired during a cross-domain workflow, you're facing mor...
Join discussionFeb 12 · 6 min read · If WebAuthn answers the question: “Can this device prove control of a credential right now?” OpenID Connect answers a different question entirely: “Who is this person across systems, time, and organizations?” Modern authentication systems fail wh...
Join discussion
Jan 25 · 10 min read · In my previous blog, I focused mainly on the theoretical aspects of OAuth 2.0 and OpenID Connect. Now it’s time to bring those concepts into practice. For this blog , I’ve built a dedicated Proof of Concept (POC) to demonstrate a real-world implement...
Join discussion
Jan 16 · 3 min read · Introduction : The "Data Silo" Challenge Imagine an organization managing a complex B2B collaboration. You are integrating multiple external applications using modern standards like SAML and OIDC. However, a common challenge arises: Data Disconnect. ...
Join discussionJan 13 · 2 min read · Today I would like to share how to configure GitHub Actions OIDC with AWS. In this lab, you will learn why we use OIDC for AWS. Traditionally, we use an AWS Access Key ID and Secret Access Key as the authentication method to communicate with AWS serv...
Join discussion
Jan 4 · 8 min read · Introduction: The Magic Login Button You're on a website. You see "Login with Google" or "Login with GitHub." You click it. Boom — you're logged in. No passwords to remember, no email verification waiting. Just... magic? But how does this actually wo...
Join discussion