As you might already know, I was able to get a position at WSO2, a leading middleware company based on Sri Lanka. After the orientation, we were assigned to individual projects before permanantly alocating to teams. I was lucky enough to be assigned to a project in WSO2 Identity Server, which let me get to know the awesome Team-IS. With ...
Introduction Magento is one of the most popular open-source e-commerce systems in the world. If you run an online store through Magento, you might want to consider enabling single sign-on with WSO2 Identity Server which is a well-recognized identity and access management solution that is used by many fortune 500 companies. Pre-requisites Magento 2+ needs to be installed and configured ...
The world password day was just two days ago (first Thursday of May, which was the 2nd for this year) and I saw a lot of articles and events all around the world. Personally to me, passwords are nothing but problems. Why? Well, you have to think of a lot of things before choosing a password. The first and obvious ...
Hi all, Here I am with another article that can get you a little bit higher on your IAM ladder. In my previous articles, I talked about what OAuth is, it’s grant types and what OpenID Connect is. Today I intend to give you hands-on experience with a real-life OAuth and OIDC implementation that is used by more than 100 ...
Introduction When you use WSO2 Identity Server with OAuth functionalities, issued access tokens are likely to be accumulated in the database, due to expiration, inactivation or revocation. In order to address this issue, the server ships with token clean-up methods, that allows you to keep your deployment free from growing token tables and decreasing performance on token flows due to data ...
What is Identity Governance In theory, Identity Governance refers to the policy-based centralized orchestration of user identity management and access control. In layman’s terms this refers to managing different aspects of user accounts and how they access the resources offered. It’s believed that the concept of identity governance grew out of the Identity Governance Framework, a now-defunct project by the ...
Introduction “Performance” is something every tech solution talks about, yet most of them have their own versions of the concept in mind. I’ve been involved with measuring the performance of the WSO2 Identity Server for more than a year now, and in this post, I’m trying to express my own understanding of the same. The field of application performance is ...
What is Identity Governance In theory, Identity Governance refers to the policy-based centralized orchestration of user identity management and access control. In layman’s terms this refers to managing different aspects of user accounts and how they access the resources offered. It’s believed that the concept of identity governance grew out of the Identity Governance Framework, a now-defunct project by the ...
What’s up, folks? Today I’m going to talk about the eventing framework of the WSO2 Identity Server. There are numerous operations you can do with the WSO2 Identity Server such as user operations, and the eventing framework is designed to trigger events when each of those operations are executed. We can write Handlers that can be subscribed to these events ...
Hello everyone! In my previous posts, I talked about the basic OAuth concept (IAM for dummies: How does OAuth work) and OAuth Grant types (IAM for dummies: OAuth 2 Grant Types). Today, I’m going to give you an understanding of OpenID Connect. What is OIDC? OpenID Connect or most commonly known as OIDC is an additional identity layer built on ...
I talked about the concept of OAuth in my previous post. Today I’m going to dive a bit too deep and talk about the implementation details provided by the OAuth 2.0 specification. The first specific of OAuth was OAuth 1.0 and after a few years of the use, people identified some problems with it and created OAuth 2.0, the improved ...
What’s up, guys? Today I’m going to talk about OAuth. I’ve been delivering OAuth presentations for a while now and I can’t believe it didn’t cross my mind to write something up on it. So here goes nothing! OAuth is THE industry-standard protocol for authorization. It is used by a majority of software service providers including WSO2 Identity Server, which ...
