Articles

18 Nov 2021
Improving SAML SSO Security Using HTTP Artifact Binding

SAML implementations typically exchange sensitive user data via the browser. This considerably increases the attack surface of your Single Sign-On (SSO) solution. Luckily, SAML offers an alternative mechanism called HTTP Artifact binding that allows protocol messages to be transported more securely.

Sundas Choudry

Job Role

Software Developer

Improving SAML SSO Security Using HTTP Artifact Binding
01 Sept 2021
Get a Single Sign-on (SSO) POC up and running in minutes.

If you are new to SSO, the learning curve can appear quite daunting; not only do you have to change the way your applications perform authentication, you also need to configure and deploy the single sign-on server. Our All in one solution gets you started in minutes.

Andrew Clymer

Job Role

Head of Identity and Access Management

Get a Single Sign-on (SSO) POC up and running in minutes.
24 Jun 2021
Installing IdentityServer and AdminUI on Linux

AdminUI has recently been made available as a universal project, meaning we now support a Linux installation scenario rather than recommending Docker as a multiplatform approach. This article will go through the steps needed to get AdminUI up and running on Linux.

Sam Brinsden

Job Role

Software Developer

Installing IdentityServer and AdminUI on Linux
05 Mar 2021
Implementing ABAC in a Microservice Architecture

Microservices is a common architectural pattern, but how best to integrate it with Attribute Based Access Control (ABAC).

Andrew Clymer

Job Role

Head of Identity and Access Management

Implementing ABAC in a Microservice Architecture
26 Feb 2021
Account Enumeration How To Harden Your SSO Solution

An account enumeration attack involves an attacker attempting an action, such as authentication or password reset, and looking for differences between responses to gain information on the system. Learn how to harden your SSO solution against these attacks.

Jo Stevens

Job Role

Software Developer

Account Enumeration How To Harden Your SSO Solution
01 Feb 2021
Why You Wouldn’t Use SAML in a SPA and Mobile App

SAML works really well for server-side applications, providing single sign-on across your applications. But can you use SAML with modern application types such as SPAs and mobile apps?

Sundas Choudry

Job Role

Software Developer

Why You Wouldn’t Use SAML in a SPA and Mobile App
22 Jan 2021
Announcing Support for Duende IdentityServer

When will products be supporting Duende IdentityServer? Will I have to pay for my component to work with Duende IdentityServer? How can I keep up to date with product releases?

Kieran Odinius

Job Role

Business Development

Announcing Support for Duende IdentityServer
20 Jan 2021
Rsk.Saml v4: Release Notes

SAML support for Duende IdentityServer is now available. Over the past few months, we have been updating our SAML component to work with both IdentityServer4 and Duende IdentityServer. As a result, we have split our component into separate packages to handle SAML identity provider and service provider functionality.

Scott Brady

Job Role

Security Consultant

Rsk.Saml v4: Release Notes
14 Dec 2020
Authorization, What Are My Options?

Applications are designed to deliver functionality to users - this is their primary goal. However, commonly, not all users can do everything in an application: features may be sensitive, they may need a premium subscription, or someone may need to give the user explicit permission to access their data. Delivering this "limiting" of functionality is also a critical part of application design. This article explores options for controlling access to functionality and assesses their strengths and weaknesses

Andrew Clymer

Job Role

Head of Identity and Access Management

Authorization, What Are My Options?
09 Nov 2020
Online Tutorials for Getting Started with IdentityServer4 and AdminUI

Looking to get started with IdentityServer and AdminUI? Rock Solid Knowledge has released four new online tutorials to help you kick start your single sign-on solution (SSO).

Kieran Odinius

Job Role

Business Development

Online Tutorials for Getting Started with IdentityServer4 and AdminUI
02 Nov 2020
The Benefits of SSOs for Your Business

The increasing complexity of the digital world is making single sign-on solutions (SSOs) more popular. Understand the benefits in its personal use and across your business, how it can improve employee productivity, and their work experience.

Briean Jenich

The Benefits of SSOs for Your Business
01 Oct 2020
IdentityServer vNext: Duende IdentityServer

IdentityServer has reached such a level of adoption that building and maintaining it has become a considerable effort. The creators, Dominick and Brock, have decided that this is no longer tenable with free/sponsored development. Therefore, they have announced the next version of IdentityServer (Duende IdentityServer) will require a paid for license for commercial use.

Andrew Clymer

Job Role

Head of Identity and Access Management

IdentityServer vNext: Duende IdentityServer
30 Sept 2020
AdminUI 4.0 Release Notes

AdminUI 4.0 now supports IdentityServer v4, changes to API resources and scopes, and additional ways to download and run AdminUI.

Kieran Odinius

Job Role

Business Development

AdminUI 4.0 Release Notes
16 Sept 2020
Managing Identities Across Cloud-based Applications and Services with SCIM

Managing user identities across cloud-based architectures can be difficult. By using the SCIM standards we can make this task simpler and more cost effective. This article will cover what SCIM is, why we use SCIM and give you a chance to preview the new SCIM for ASP.NET component from Rock Solid Knowledge.

Alex Jones

Job Role

Software Developer

Managing Identities Across Cloud-based Applications and Services with SCIM
04 Sept 2020
Rsk.Saml v3: Release Notes

SAML support for IdentityServer4 v4 is now available. Over the past few months, we have been building new features in our SAML IdP & SP component, culminating in 6 minor releases and 2 major releases.

Scott Brady

Job Role

Security Consultant

Rsk.Saml v3: Release Notes
20 Aug 2020
AdminUI 3.1 Release Notes

AdminUI 3.1 includes: clone client, two new client secret types, no more tokens in the browser, a new installer, redesigned client settings and more.

Kieran Odinius

Job Role

Business Development

AdminUI 3.1 Release Notes
16 Jul 2020
Online Tutorials for FIDO2 for ASP.NET

Looking to get started with FIDO2 for ASP.NET and WebAuthn? Rock Solid Knowledge has released 4 new online tutorials to help you implement our “FIDO2 for ASP.NET” component.

Scott Brady

Job Role

Security Consultant

Online Tutorials for FIDO2 for ASP.NET
09 Jul 2020
Migrating Your IdentityServer4 v3 Database to IdentityServer4 v4

With the release of IdentityServer4 v4 comes new features, and with those features come model changes. To account for the model changes, your database needs to be updated.

Alex Jones

Job Role

Software Developer

Migrating Your IdentityServer4 v3 Database to IdentityServer4 v4
06 Jul 2020
Using Biometrics in ASP.NET Core

Physical biometrics, such as fingerprint or facial recognition, are super useful when logging into mobile apps. It allows the user to prove their presence without having to manage a password or go through a Multi-factor Authentication (MFA) process. So why can't you use biometrics in the browser?

Scott Brady

Job Role

Security Consultant

Using Biometrics in ASP.NET Core
18 Jun 2020
Using AdminUI to Only Manage your Client Applications

Guided walkthrough on how you can use AdminUI to only manage your IdentityServer configuration.

Jo Stevens

Job Role

Software Developer

Using AdminUI to Only Manage your Client Applications
09 Jun 2020
Strong Authentication Without the Drama

Confirmation of identity is central to all security decisions. A whole host of decisions are made based on a user proving who they are. Failing to successfully prove identity means the entire authorization system comes crashing down.

Andrew Clymer

Job Role

Head of Identity and Access Management

Strong Authentication Without the Drama
28 May 2020
AdminUI's User Settings Endpoints

Learn how to create a self-service portal for user claims

Joe Harvey

Job Role

Software Developer

AdminUI's User Settings Endpoints
27 May 2020
The Challenge of Building SAML Single Logout

SAML single sign-on (SSO) allows the end-user to securely authenticate across multiple applications by logging in once using one set of credentials. However, authentication is only the first half of the story.

Sundas Choudry

Job Role

Software Developer

The Challenge of Building SAML Single Logout
19 May 2020
Choosing a Single Sign-on Solution

Companies with multiple systems that each require users to login and manage different accounts have an increased cost of ownership. Single sign-on solutions provide a reduced cost of ownership. There are many out there but which one is best for you?

Andrew Clymer

Job Role

Head of Identity and Access Management

Choosing a Single Sign-on Solution