Blog

BlogBlog

The latest news, product updates, and thoughts on identity and access management, and API security insights from the Curity team.

View all authors
Decentralized Identifiers and Verifiable Credentials: The Building Blocks for Self-Controlled Identities

Decentralized Identifiers and Verifiable Credentials: The Building Blocks for Self-Controlled Identities

Decentralized Identifiers and Verifiable Credentials combined provide a promising new way of identity management.

Judith Kahrer

Judith Kahrer

API Security Trends 2023

API Security Trends 2023

Why 2023 will be the year of API security and what are the key API security best practices to focus on.

Michal Trojanowski

Michal Trojanowski

Myths and Truths About Decentralized Identifiers

Myths and Truths About Decentralized Identifiers

In this article we straighten up some misconceptions and provide some basic understanding concerning Decentralized Identifiers (DIDs).

Judith Kahrer

Judith Kahrer

Why APIs Require Zero Trust Security

Why APIs Require Zero Trust Security

APIs are critical for modern solutions in most industries. This is why a zero-trust approach is required in API security.

Judith Kahrer

Judith Kahrer

My Takeaways from IIW 35

My Takeaways from IIW 35

Last week, some of us attended the OpenID Foundation’s OpenID Workshop and the Internet Identity Workshop (IIW) in San Francisco, California. Here are some of my key takeaways.

Jacob Ideskog

Jacob Ideskog

Designing Your OAuth Login Workflow

Designing Your OAuth Login Workflow

With security becoming more sophisticated in recent years, implementing authentication workflows within applications is no longer viable.

Gary Archer

Gary Archer

How to Start Your IAM Journey Right — In Three Steps

How to Start Your IAM Journey Right — In Three Steps

This article offers advice on what to consider when starting your identity and access management (IAM) journey.

Judith Kahrer

Judith Kahrer

Which Is Best for IAM: Build, Open Source, or Buy?

Which Is Best for IAM: Build, Open Source, or Buy?

Deciding the best way to modernize or scale up your Identity and Access Management and API security can be a difficult task. Here are some considerations.

Stefan Nilsson

Stefan Nilsson

Upgrading Your IAM System the Right Way

Upgrading Your IAM System the Right Way

The OAuth family of specifications provides the best architecture capabilities and many advanced design patterns for managing security-related use cases.

Gary Archer

Gary Archer

5 Practical Questions on EdDSA Answered

5 Practical Questions on EdDSA Answered

Why and when the EdDSA algorithm should be implemented to save you time, money, and resources.

Judith Kahrer

Judith Kahrer

5 API Security Principles That Are Here to Stay

5 API Security Principles That Are Here to Stay

With APIs becoming the most frequent attack vector of cybercrimes, it's now more important than ever to stay on top of API security trends.

Michal Trojanowski

Michal Trojanowski

Why No Password Is Better than One Password

Why No Password Is Better than One Password

What is passwordless authentication? Why is it better than using traditional passwords? How can a passwordless approach be implemented?

Jonas Iggbom

Jonas Iggbom

How Should You Serve Your Access Tokens: JWTs, Phantom, or Split?

How Should You Serve Your Access Tokens: JWTs, Phantom, or Split?

How should you serve your access tokens: JWTs, phantom, or split?

Michal Trojanowski

Michal Trojanowski

The Future of Open Finance Is Here

The Future of Open Finance Is Here

Introducing the report on how the financial industry is managing the adoption of Open Banking

Stefan Nilsson

Stefan Nilsson

Using Subject Alternative Names to Authenticate OAuth Clients

Using Subject Alternative Names to Authenticate OAuth Clients

Certificates are a hard technology to work with. In this spirit, I recently decided to learn more about Subject Alternative Names (SANs).

Travis Spencer

Travis Spencer

The Evolution of Signature Algorithms

The Evolution of Signature Algorithms

Algorithms are essential to avoid security incidents such as private keys being retrieved from signatures or valid signatures being created.

Judith Kahrer

Judith Kahrer

Smart API Security for Your Smart Car

Smart API Security for Your Smart Car

Cars are smarter and more connected than ever and security breaches are rising. Here we outline the fundamental principles of API security to be aware of.

Jonas Iggbom

Jonas Iggbom

Build Your OAuth Login User Experience

Build Your OAuth Login User Experience

Consistently branded log in that look like the rest of your app is critical for UX. Here are some things to consider when integrating OAuth into your apps.

Gary Archer

Gary Archer

Your APIs Are Only as Secure as Your JWTs

Your APIs Are Only as Secure as Your JWTs

API security has matured over the years, and we have moved from API-keys-based security to token authorization. JWTs are a popular format for access tokens

Michal Trojanowski

Michal Trojanowski

Security Best Practices for SaaS Businesses

Security Best Practices for SaaS Businesses

Best practices for SaaS companies to ensure the security of their solutions and empower their businesses.

Jonas Iggbom

Jonas Iggbom

Digital Identity and How to Protect It

Digital Identity and How to Protect It

What is digital identity, and what measures should one take to protect it most efficiently? Read the interview with Curity's CTO Jacob Ideskog.

Jacob Ideskog

Jacob Ideskog

Benefits of IdP Integration With the Curity Identity Server

Benefits of IdP Integration With the Curity Identity Server

Integrating an IdP responsible for user authentication with the Curity Identity Server allows organizations to reuse and extend existing solutions.

Travis Spencer

Travis Spencer

OAuth Tools: The Free OAuth Laboratory

OAuth Tools: The Free OAuth Laboratory

If you're looking for a place to experiment, learn, and explore the inner workings of OAuth and OpenID Connect, check out our award-winning OAuth Tool.

Daniel Lindau

Daniel Lindau

Java 17 And Our Commitment to Technology

Java 17 And Our Commitment to Technology

With the Curity Identity Server 7.0 we upgrade to Java 17. We are eager to see as broad adoption of Java 17 as Java 8 received.

Jacob Ideskog

Jacob Ideskog

Join The Discussion

Follow @curityio on Twitter