InfoQ Homepage Identity Management Content on InfoQ

Articles

RSS Feed

Newer Older

Architecture & Design

Securing Cell-Based Architecture in Modern Applications

Securing cell-based architecture is essential to fully capitalize on its benefits while minimizing risks. To achieve this, comprehensive security measures must be put in place. Organizations can start by isolating and containing cells using sandbox environments and strict access control mechanisms like role-based and attribute-based access control.

Stefania Chaplin
on Oct 28, 2024
Culture & Methods

Diving into Zero Trust Security

The Zero Trust approach involves a combination of more-secure authentication approaches, such as MFA with profiling and posturing of the client device, along with some stronger encryption checks. This article shares some insights on Zero Trust Security for your organization and your customers, and how you can get started with it.

Sindhuja Rao Deepank Dixit
on Jun 23, 2022
Cloud

The What and Why of Programmable Proxies

A question which gets often asked is “What is a programmable proxy, and why do I need one?” This article tries to answer this question from different perspectives. We will start with a brief definition of what a proxy is, then discuss how proxies evolved, explaining what needs they responded to and what benefits they offered at each stage. Finally, we discuss several aspects of programmability.

Cai Shu Ali Naqvi
on May 18, 2022
Web Development

Bootstrapping the Authentication Layer and Server with Auth0.js and Hasura

When you're trying to prototype an MVP for your app and want to start iterating quickly, the upfront cost of setting up authentication can be a massive roadblock. The authentication layer requires significant work, and you must always be on the lookout for security vulnerabilities.

Iskander Samatov
on Aug 25, 2021
Cloud

A Reference Architecture for Fine-Grained Access Management on the Cloud

In this article, we will define a new reference architecture for cloud-native companies that are looking for a simplified access management solution for their cloud resources, from SSH hosts, databases, data warehouses, to message pipelines and cloud storage endpoints.

Manav Mital
on Apr 22, 2021
Cloud

Identity Mismanagement: Why the #1 Cloud Security Problem Is about to Get Worse

In this article, we'll look at why IAM is becoming such a huge challenge, explain why identity is the new currency, and then reveal some principles that can help you meet this challenge.

Bernard Brode
on Aug 19, 2020
Culture & Methods

Q&A on the Book Cyber Warfare

The book Cyber Warfare by Dr. Chase Cunningham explores how organizations can defend themselves against cyber attacks. It provides examples of actual attacks together with defense techniques, tools, and strategies for cybersecurity.

Ben Linders Chase Cunningham
on Jul 07, 2020
DevOps

GDPR for Operations

With GDPR, taking care of personal data is an organisation-wide responsibility, but in the operations we can provide a lot of supporting tools to help deal with the multiple facets of this problem.

Jon Topper
on Mar 10, 2018
Author Q&A on Leading without Authority

Tathagat Varma, shares his experience of working as an individual contributor at a deeper leadership level. He refers to this as an "Individual Leader". This post explains how to lead without authority.

Savita Pahuja
on Aug 16, 2015
Hologram - Finally, AWS Key Distribution that Makes Sense

Faced with the lack of solutions for secure distribution of AWS access keys to developers, AdRoll decided to build their own open source Hologram, a system that brings Amazon's Instance Profile mechanism to developer workstations. Adair details the process, tool design and main features.

Arian Adair
on Mar 31, 2015
Do we really need identity propagation in SOA and Clouds?

Identity Propagation through Single Sign-On(SSO) has been assumed to be a panacea for all identity issues in SOA and Clouds. In this article, Michael Poulin raises questions around the business feasibility of propagation and proposes a delegate model of representation instead.

Michael Poulin
on Aug 20, 2012
Don't SCIM over your Data Model

This opinion piece discusses three specific suggestions for improving the SCIM data model: 1. Both the enterprise client and cloud provider should map their internal IDs to a shared External ID, which is the only ID exposed through the API. 2. Multi-valued attributes of a resource must be converted from an array into a dictionary with unique keys. 3. 3 ways to improve the PATCH command

Ganesh Prasad
on Aug 08, 2012