Blog

Blog

The latest news, product updates, and thoughts on identity and access management, and API security insights from the Curity team.

View all authors

Security Best Practices for SaaS Businesses

Best practices for SaaS companies to ensure the security of their solutions and empower their businesses.

Jonas Iggbom

2022-04-29

Digital Identity and How to Protect It

What is digital identity, and what measures should one take to protect it most efficiently? Read the interview with Curity's CTO Jacob Ideskog.

Jacob Ideskog

2022-04-26

Benefits of IdP Integration With the Curity Identity Server

Integrating an IdP responsible for user authentication with the Curity Identity Server allows organizations to reuse and extend existing solutions.

Travis Spencer

2022-04-12

OAuth Tools: The Free OAuth Laboratory

If you're looking for a place to experiment, learn, and explore the inner workings of OAuth and OpenID Connect, check out our award-winning OAuth Tool.

Daniel Lindau

2022-04-08

Java 17 And Our Commitment to Technology

With the Curity Identity Server 7.0 we upgrade to Java 17. We are eager to see as broad adoption of Java 17 as Java 8 received.

Jacob Ideskog

2022-04-01

Understanding the Levels of API Security

What is the best API security approach to adopt? Amid rising API attacks, API security should be front and central for modern enterprises.

Jacob Ideskog

2022-03-23

Modern Techniques for Securing SPAs

Presenting the new Curity whitepaper focused on helping developers to improve the security of single page applications with the Token Handler pattern.

Gary Archer

2022-03-18

Partner Opportunities with Curity

partner-opportunities-with-curityJoin Curity's partner network to help deliver secure solutions for today’s complex digital services. Learn more.

Stefan Nilsson

2022-02-28

OAuth Application Guides for Solution Design

If you are building an API, website, mobile app or API gateway integration, our guides can help you.

Gary Archer

2022-02-23

Managing Scopes and Claims in OAuth Tokens

OAuth and OpenID Connect tokens are vital standards to help maintain a high level of security.

Michal Trojanowski

2022-02-14

3 Solutions for Securing Complex API Ecosystems

As the number of APIs grow, protecting them becomes increasingly difficult.

Michal Trojanowski

2022-01-21

Zero Trust With Strong Passwordless Authentication Using Curity and Beyond Identity

Organizations are moving towards a Zero Trust Architecture where the user identity must be verified frequently, the use of passwords is less than ideal.

Jonas Iggbom

2022-01-05

Prince JARMing

JWT Secured Authorization Response Mode (JARM) allows you to use signed and encrypted responses. But why introduce another encryption if there is TLS?

Judith Kahrer

2021-12-27

Curity's Rapid Response to Log4Shell Vulnerability

A timeline of how the Curity team responded to the Log4Shell vulnerability to ensure the safety of the customers' deployments.

Travis Spencer

2021-12-14

Managing Identities and App Security Consistently in a Complex IT Environment

How ICA Gruppen consistently manages identities and app security in a very complex IT environment.

Daniel Lindau

2021-12-10

FIPS 201 Is Changing

FIPS 201-3 is expected to be ratified very soon. To help you make sense of this update and to prepare, we have published and updated a few resources:

Travis Spencer

2021-11-29

User Opt-In Multi-Factor Authentication

What are the benefits of using Opt-In MFA action, a new addition to the Curity Identity Server?

Jacob Ideskog

2021-11-22

Considerations for a Modern IAM Infrastructure

What are the factors that need to be considered when choosing a way to modernize your identity and access management infrastructure?

Stefan Nilsson

2021-11-08

From the HEART

How do you protect people's integrity in a pandemic when you rely on private data being shared and accessible?

Judith Kahrer

2021-10-22

Open Banking for B2B Scenarios

In open banking, we tend to talk about the consumer-facing challenges, but business-to-business (B2B) isn’t mentioned that often.

Stefan Nilsson

2021-10-19

Token Handler: The Single Page Application’s New BFF

How do you solve the conflict between Single Page Applications running smoothly and end-users receiving the best customer experience in the browser?

Gary Archer

2021-09-29

Going Passwordless With WebAuthn

Weak passwords are driving a factor towards a passwordless approach. The WebAuthn standard is one of the leading technologies to achieve this securely.

Jonas Iggbom

2021-09-22