Articles

External AuthZ Policy for Zuplo API Gateway

How to use Zuplo API Gateway to protect your HTTP API using an external Policy Decision Point

Jerrie Pelser

Two Factor SMS is Dead

Andrew Clymer

•

Job Role

Managing Director

Enforcer 5.0 Is Here: Smarter Authorization, Now AuthZen-Ready

Patrick Allwood

Inclusive, Secure, and Verified: The Future of Digital Identity Verification

Andrew Clymer

•

Job Role

Managing Director

Why Passkeys are the Future of Accessible Authentication

SCIM Cursor Pagination

Implementation of the draft-ietf-scim-cursor-pagination-05

Andrew Clymer

•

Job Role

Managing Director

FIPS and FIDO2/Passkeys

V4.0 of our FIDO2/Passkey component uses a FIPS 140-3 certified cryptographic module.

Andrew Clymer

•

Job Role

Managing Director

Moving your AdminUI All-in-one Template into Production

Moving your local Single-Sign-On (SSO) solution onto production can be scary, but with this essential configuration, you will be on the right track.

Nacho Escrig

•

Job Role

Software Developer

Mitigate Phishing Attacks

What is a Phishing attack? What can organizations do to prevent phishing attacks? How does EvilJinx and FIDO come into play?

Kevin Jones

•

Job Role

Consultant

Don't Use Claims for Authorization

When discussing security, we often divide it into two parts: authentication and authorization. So, what's the difference between the two? When should I be using a claim, and why shouldn't i use it to drive policy?

Kevin Jones

•

Job Role

Consultant

Writing Authorization Policy Just Got Easier

Enforcer 3.0 makes it even easier to develop and maintain authorization policy written in ALFA. The 3.0 release enhances the IDE experience, providing tools such as rename, goto definition and find all references

Andrew Clymer

•

Job Role

Managing Director

Quick Start Duende IdentityServer SSO with Management Console

Do you want to create a Single Sign-On (SSO) solution based on Duende IdentityServer? Do you want a management UI for managing users and IdentityServer configuration? Then look no further; our Duende IdentityServer & AdminUI code template will have you up and running in less than 15 minutes.

Nacho Escrig

•

Job Role

Software Developer

Is SMS a Sensible Choice for Password Reset?

At first glance SMS sounds like a reasonable technology for password reset. However, it's far from it.

Andrew Clymer

•

Job Role

Managing Director

The Dangers of Considering Email as Two-Factor Authentication

It is important to consider the potential risks associated with using email as a form of two-factor authentication. It may be worth exploring alternative options that offer increased security.

Paul Brummitt

•

Job Role

Software Developer

Using Dynamic Authentication Providers feature in Duende IdentityServer with AdminUI

Discover the Dynamic Authentication Providers feature for AdminUI, including its functionality and a video demonstration.

Kieran Odinius

•

Job Role

Business Development

AdminUI as a Framework

Since its inception, AdminUI has been an application requiring no development effort to get it running. However, it is not as flexible as some of our customers require. So let's fix that!

Andrew Clymer

•

Job Role

Managing Director

We Are Officially B Corp Certified!

As of January 2023, Rock Solid Knowledge is proud to announce that we are a Certified B -Corporation™. B Corp questions assess every aspect of your organisation - from the environment to governance to how we treat our workers and customers.

Kieran Odinius

•

Job Role

Business Development

Implementing CIBA in Duende IdentityServer

Client-Initiated Backchannel Authentication (CIBA) is a new OpenID Connect specification that describes decoupled authentication flows. This article describes how to implement a CIBA flow inside Duende IdentityServer.

IdentityServer4 End-of-life (EOL) - What Next?

IdentityServer4 will no longer be supported from 13th December 2022. We outline our product-specific support and migration steps to Duende IdentityServer

Kieran Odinius

•

Job Role

Business Development

WS-Federation Integration with Duende IdentityServer

Are you looking to support WS-Federation clients into your IdentityServer? If so, this tutorial will help you implement a cross-protocol SSO.

AdminUI 6.3 Release Notes

AdminUI now supports custom identity implementations for users with their own identity schemas or extensions of the ASP.NET Identity schema.