Curity logo
  • Identity ServerAccess IntelligenceToken Intelligence
    Read more→

    See how the platform fits together

  • By use case iconBy Use Case
    API Access ControlB2B and Partner IdentityCIAMModernize InfrastructureOpen Banking and Financial-Grade APIsSecure AI and Machine Access
    By industry iconBy Industry
    Financial ServicesGovernmentHealthcareTech & SaaSTelecom
  • Pricing
  • Business iconBusiness
    ArticlesBlogCoursesDocumentsTrainingVideosWebinars
    For developers iconFor developers
    Code ExamplesDeveloper PortalDocumentationGetting StartedGuidesHow-tosOAuth Tools
  • AboutCareersContact
    CustomersESGEvents Calendar
    NewsPartners
  • Talk to an Expert
  • Get Started
ArticlesCode ExamplesCoursesDocumentationDocumentsGetting StartedGuidesHow-tosTrainingVideosWebinarsWhat's new

Authentication and Authorization

  • Authentication
    • Authentication Overview
    • WebAuthn Authenticator
    • Passkeys Authenticator
    • Google Authenticator App
    • Handling Expired Sessions During Authentication
    • Manage User Account Lockout
    • Preregister Devices in a WebAuthn Authenticator
    • Geo-Location Authenticator Filter
  • Integration With Identity Providers
    • Identity Providers Overview
    • Authenticate Using Microsoft Entra ID
    • Authenticate Using Okta
    • Authenticate Using Sign in With Apple
    • Authenticate Using Beyond Identity
    • Authenticate Using Signicat
    • Authenticate Using BankID v6
    • Authenticate Using SITHS Authentication
    • Authenticate Using Norwegian BankID
    • Integrating with SAML Identity Providers
    • Using the Dynamic Authenticator
    • Credential Verification With Entra ID
  • Authentication Actions
    • Authentication Actions Concepts
    • MFA Using Authentication Actions
    • Opt-in Multi-Factor Authentication
    • Scripted Attribute Transformation
    • Authentication Actions Data Example
    • Action Bundles
    • Account Creation after Login
    • Account Linking With Social Identity Providers
    • Migrating to Passkeys
    • Authentication Fallback
  • OAuth & OpenID Connect
    • Code Flow
    • Implicit Flow
    • Hybrid Flow
    • Client Credentials Flow
    • Refresh Tokens
    • Revoking OAuth Tokens
    • Resource Owner Password Flow
    • User Consent
    • Device Authorization Grant
    • Ephemeral Clients (Client ID Metadata Documents)
  • Advanced OAuth & OpenID Connect
    • Configuring Proof Key for Code Exchange
    • Non-Templatized DCR
    • Templatized DCR
    • Custom DCR Request Validation
    • Using PPIDs
    • Entitlements in Introspection
    • JWT Assertions
    • Using JWT Authorization Requests
    • Using Pushed Authorization Requests
    • Consuming Responses with JARM
    • Running a CIBA Flow
    • Using SAN to Authenticate an OAuth Client
  • Tokens and Claims
    • Token Designer Overview
    • Custom Token Issuer
    • Working With Claims
    • Adding Claims from Authentication
    • Implementing Custom Claims
    • Implementing Token Exchange
    • Verified Claims and Identity Assurance
    • EdDSA Signatures in Tokens
    • Implementing Impersonation
  • Non-human Identities
    • Authenticate with Kubernetes Service Account Tokens
    • Integrate with an Istio Service Mesh
    • Integrate with SPIFFE and SPIRE
    • Authenticate with SPIFFE JWT SVIDs
    • Authenticate with SPIFFE X509 SVIDs
  • Decentralized Identities
    • Verifiable Credentials in Action
    • Verifiable Credentials in Wallets
    • Issue a Verifiable Credential
    • VCI with Pre-authorized Code

Onboarding

  • Configuration Management
    • Configuration Overview
    • Import and Export Configurations
    • Configure Deployed Environments
    • Introduction to the CLI
    • Keys, Certificates and Trust Stores
    • Automate Certificate Renewal
    • Configuration as Code
  • Data Management
    • Data Management Overview
    • Get Started with Identity Data
    • Get Connected to SQL Data Sources
    • Get Connected to NoSQL Data Sources
    • Upgrade Data Sources
    • Multi-Region Dynamic User Routing
    • Multi-Tenant Architectures
  • Deployment
    • Docker Container Customization
    • Exposing an Instance Using ngrok
    • Running in Cluster Mode
    • Clustering with Docker Compose
    • Testing the Curity Identity Server
    • AWS Deployment Overview
    • Install on AWS using CloudFormation
    • Install on AWS using the CDK
    • Azure Deployment Overview
    • Upgrade Best Practices
  • Kubernetes
    • Configure Deployments using Helm
    • Expose OAuth Endpoints from Kubernetes
    • Use Kubernetes Data Storage
    • Use Kubernetes API Gateway Plugins
    • Deploy to Google Kubernetes Engine (GKE)
    • Deploy to Elastic Kubernetes Service (EKS)
    • Deploy to Azure Kubernetes Service (AKS)
    • Kubernetes Auto Scaling
    • Encrypted Configuration using Helm
    • Configuration Backups and Logging using Helm
    • IAM Role for Service Accounts
  • Migrations
    • Migrating from Spring Security OAuth
    • Migrating from Keycloak
    • Migrating from IdentityServer4
    • Migrate from Microsoft ADFS

Operation

  • Administration
    • Using AD for Admin UI Users
    • Federated Login to the Admin UI
    • DevOps Dashboard Overview
    • Token Signing Key Rotation
    • User Self-Service Portal
    • Curity Access Control Rules
    • Authorization Rules for the RESTCONF API
    • Configuring Redirect URI Policies
    • Using DKIM
    • Integrating PKCS#11-based High Security Modules
    • Endpoints and their URLs
  • Dashboard and API Access
    • User Management with SCIM
    • User Management with GraphQL
    • Database Client Management with GraphQL
    • Running the DevOps Dashboard
    • Scope Authorization Manager
    • Groups Authorization Manager
    • Attribute Authorization Manager
    • Implementing Role Based Security
    • Email Activation When Using SCIM
  • Branding and User Experience
    • Customization Overview
    • Fast Look and Feel Customization
    • Extended Look and Feel Customization
    • Single Brand Customization Example
    • Multi-Brand Customization Example
    • Email Customization Example
    • Custom Password Validation
    • Customizing User Consent
    • Right-to-Left Language Support
  • Logging and Monitoring
    • Logging and Monitoring Overview
    • The Grafana Dashboard
    • OpenTelemetry Tracing
    • Logging Best Practices
    • Customizing Auditing Logs
    • Debug Logging
    • Per-client Debug Logging
    • Log Aggregation to Splunk
    • Log Aggregation to Datadog
    • Log Aggregation to Elasticsearch
    • Health and Auto Healing
    • Integrate Alarms with Cloud Monitoring
    • Java Runtime Monitoring
    • How to Record a Browser Trace
  • Integrations
    • Apache mod_auth_openidc module
    • Curity as IdP in Salesforce
    • Curity as an IdP in Cloudflare
    • Integrating with Microsoft Entra ID
    • Setting up OIDC in MuleSoft Anypoint
    • Integrating with Kong Developer Portal
    • Integrating with Tyk Developer Portal
    • Integrating with the Jetty "openid" module
  • Writing Plugins
    • OAuth Customization using Scripting
    • OAuth Customization using Plugins
    • Plugin SDK Coding Skill
    • Getting Started with Authentication Plugins
    • Authentication Plugin Techniques
    • Simple Authentication Action
    • Generic Consentor Plugin
    • Attaching a Remote Debugger

API Gateway Integration

  • Phantom Token
    • Implementing the Phantom Token Approach
    • Integrating with NGINX
    • Integrating with Kong Enterprise
    • Integrating with Kong Open Source
    • Integrating with OpenResty
    • Integrating with Apigee Edge
    • Integrating with Microsoft Azure API Management
    • Integrating with the AWS API Gateway
    • Integrating with Broadcom CA Layer7
    • Integrating other API Gateways
    • Integrating with Zuplo
    • Integrating with Mulesoft Flex
    • Integrating with IBM API Connect
    • Integrating with Tyk
    • Integrating with WSO2 API Manager
  • Split Token
    • Integrating with Apigee Edge
    • Integrating with the AWS API Gateway
    • Integrating with the Cloudflare Gateway
  • OAuth Proxy
    • Integrating with Kong API Gateway
    • Integrating with OpenResty
    • Integrating with NGINX
    • Integrating with Azure API Management
    • Integrating with AWS API Gateway
    • Integrating with Google Apigee API Management
  • Advanced Integration
    • Dynamic User Routing with NGINX
    • Dynamic User Routing with Kong Open Source
    • Dynamic User Routing with Cloudflare Gateway
    • Dynamic User Routing with Cloud Platforms
    • API Authorization using Open Policy Agent and Kong
    • Open Banking Brazil DCR Request Validation

Applications

  • Web Applications
    • Create a Token Handler
    • Integrate a SAML Website
  • HAAPI Configuration
    • Web Client HAAPI Setup
    • Android Client HAAPI Setup
    • iOS Client HAAPI Setup
    • Native Passkeys Configuration
  • HAAPI Mobile Guides
    • Android Integration
    • iOS Integration
    • Password Flows
    • Advanced Flows
    • Customize the Android Look and Feel
    • Customize the iOS Look and Feel
    • Advanced Login Customizations
    • App2App Logins using BankID
    • Security Lifecycle
    • Attestation Fallback

Learn more

  • Webinars
  • Documents
  • Videos
  • Training

Authentication

Learn how to configure and implement various authenticators in the Curity Identity Server, such as Microsoft Entra ID, Google, WebAuth, Signicat, Apple, and more.

  • March 4, 2025

    Manage User Account Lockout

    How to configure centralized user account lockout.

  • August 14, 2024

    Authentication Overview

    Overview of authentication capabilities when using the Curity Identity Server.

  • November 10, 2023

    Passkeys Authenticator

    Using passkeys to implement strong multi-factor passwordless authentication

  • September 29, 2021

    Handling Expired Sessions During Authentication

    How to use the Application URL configuration to bootstrap an authentication session

  • May 20, 2021

    Preregister Devices in a WebAuthn Authenticator

    How to preregister a cross-platform device for a WebAuthn authenticator.

  • May 12, 2021

    WebAuthn Authenticator

    How to configure and use the WebAuthn authenticator.

  • November 30, 2020

    Multi-Factor Authentication With Google Authenticator

    Google Authenticator is a popular app for two-factor authentication. Here's how to configure it in Curity Identity Server.

  • April 21, 2020

    Geo-Location Authenticator Filter

    How to set up a geo-location filter to limit the authenticators presented to a user.

Architecture

See how Curity fits into modern identity and API architectures.

Explore architecture

Customer Stories

Learn how organizations run identity and API security at scale.

Read customer stories
Curity logo

To connect with a product expert today,

email us or call +46 8-410 737 70

Get started with Curity

Curity Identity ServerCurity Access Intelligence for AIFree TrialPricingContact us
Curity AB © All Rights Reserved
Sign up for API Security Insights→
Follow us
  • X icon
  • Bluesky icon
  • LinkedIn icon
  • Medium icon
  • GitHub icon
  • YouTube icon
  • RSS icon
  • Nordic APIs icon