Articles Getting Started How-tos Guides Code Examples Documentation Videos Webinars Courses Documents

Tutorials

In the Tutorials section, you can find more detailed guides describing common scenarios using the Curity Identity Server. You can follow them step by step or use them as reference for common tasks.

How-tos

Detailed guides for common scenarios using the Curity Identity Server.

Keys, Certificates and Trust Stores
Endpoints and their URLs
Running the Curity Identity Server in a multitenant architecture
Authenticate using Azure AD
Authenticate With Google Authenticator
How to Add Authentication Actions
Account linking with Facebook
How to Use Azure AD for credential verification
Geo-Location Authenticator Filter
Scripted attribute transformation
Sign in with Apple
User Account Lockout
WebAuthn Authenticator
Preregister Devices in a WebAuthn Authenticator
Opt-in Multi-Factor Authentication
Authenticate using Signicat
User behavior MFA using the BehavioSec Authenticator
Beyond Identity Integration using OIDC Authenticator
Federated Login to the Admin UI
The Authentication Actions Toolbox
Using the Dynamic Authenticator
Code Flow
Implicit Flow
Hybrid Flow
Client Credentials Flow
Refresh Tokens
Revoking OAuth Tokens
Resource Owner Password Flow
User consent
Device Authorization Grant
Non-Templatized Dynamic Client Registration
Configuring Proof Key for Code Exchange
Templatized Dynamic Client Registration
Using Pairwise Pseudonymous Identifiers
Adding Claims from Authentication
JWT Assertions
Entitlements in Introspection
Running a CIBA Flow
OAuth Authorization with JWT Authorization Requests
Using Pushed Authorization Requests
Consuming responses with JWT Security Authorization Response Mode
Custom Token Issuer
Custom DCR Request Validation
OAuth Introspection and Phantom Tokens
Implementing Impersonation
Using Subject Alternative Names to Authenticate an OAuth Client
User Routing in Cloud Platforms
Integrating with the Apache mod_auth_openidc module
Integrating Curity Identity Server with Apigee Edge
Configuring Curity Identity Server as an Identity Provider in Salesforce
Configuring Curity Identity Server as an Identity Provider in Cloudflare
Integrating with Azure Active Directory
Setting up OpenID Connect in MuleSoft Anypoint
Setting up OpenID Connect Authentication in the Kong Developer Portal
Integrating Curity Identity Server with Apigee Edge using the Split Token Approach
Integrating with the Jetty "openid" module
Migrating from Spring Security OAuth to Curity Identity Server
Integrating the Curity Identity Server with AWS API Gateway using the Phantom Token Pattern
Email Activation When Using SCIM
Scope Authorization Manager
User Management with SCIM
User Management with GraphQL
Authorizing Access to User Data
Integrating the Curity Identity Server with AWS API Gateway using the Split Token approach
Docker Container Customization
Integrating With the Broadcom CA Layer7 API Gateway
Exposing Curity Using ngrok
Introduction to the CLI
Running in Cluster Mode
Clustering with Docker Compose
Automate Certificate Renewal
Testing the Curity Identity Server
Install on AWS using CloudFormation
AWS Deployment Overview
Azure Deployment Overview
Dynamic User Routing with Cloudflare Gateway
Kubernetes Local Installation
Split tokens with Cloudflare Gateway
Deploy to Google Kubernetes Engine (GKE)
Deploy to Elastic Kubernetes Service (EKS)
Deploy to Azure Kubernetes Service (AKS)
Deploy to an Istio Service Mesh
Kubernetes Auto Scaling
Encrypted Configuration using Helm
Configuration Backups and Logging using Helm
Integrating PKCS#11-based High Security Modules
GitOps Configuration Management
Implementing Dynamic User Routing
Integrating with Kong Enterprise
API Authorization using Open Policy Agent and Kong
Using AD for Admin users
Curity Access Control Rules
Setting DevOps Dashboard Permissions
Authorization Rules for the RESTCONF API
Kong Dynamic User Routing Plugin
Token Designer Overview
EdDSA Signatures in Tokens
Working With Claims
Integrating with Kong Open Source
Configuring Redirect URI Policies
Integrating Plugins with Kubernetes
Managing Login Screen Customization
Microsoft Azure API Management
Customize the Look and Feel
Advanced Look and Feel Customization
Per-client Debug Logging in Production Environments
Log Aggegation to Splunk
How to Customize Password Validation
Log Aggregation to Datadog
Log Aggregation to Elasticsearch
Customizing User Consent
NGINX Dynamic User Routing Plugin
Health and Auto Healing
Integrate Alarms with Cloud Monitoring
Java Runtime Monitoring
OIDC Client with Mutual TLS Client Authentication
MITREid Connect Client Library
Handling Expired Sessions during Authentication
Mobile Setup with ngrok
Integrating with OpenResty
Simple Authentication Action
Generic Consentor Plugin
Attaching a Remote Debugger
Integrating with Tyk API Gateway
Hypermedia Authentication API demo client
Using the Android SDK to Consume the Authentication API
Using the iOS SDK to Consume the Authentication API
Implementing HAAPI Fallback
Access DynamoDB using IAM Role for Service Accounts

Code Examples

Example code for SDK components, integrations and APIs

Securing a Spring Boot API with JWTs
Securing a Java API with JWTs
Securing a Kotlin API with JWTs
Securing a .NET Core API with JWTs
Securing a Go API With JWTs
Securing a NodeJS Express API with JWTs
Securing a Python Flask API with JWTs
Securing a Symfony API with JWTs
Securing a Serverless API with JWTs
Securing a Serverless API on Vercel using JWTs
Mutual TLS Secured API
API Access via JWT Assertions
Securing API Events using JWTs
SPA using the Token Handler Pattern
Token Handler Deployment Example
Standard OAuth Agent
Next.js OAuth Agent
Financial-Grade OAuth Agent
Javascript SPA using Assisted Token Flow
Javascript SPA using OAuth Assistant Library
Javascript SPA using Code Flow + PKCE
React SPA using Assisted Token Flow
Angular SPA using Assisted Token Flow
OpenID Connect Client with Spring Security
OpenID Connect Client with .NET
OpenID Connect Client with NodeJS Express
OpenID Connect Client with Python
OpenID Connect Client with Java Undertow
Website with Encrypted ID Tokens
Alarm Integration Plug-in
Swift iOS App using AppAuth
Swift iOS App using HAAPI
Kotlin Android App using AppAuth
Kotlin Android App using HAAPI
Mobile Dynamic Client Registration
BehavioSec Authenticator
NGINX Phantom Token Module
Bitbucket Authenticator
NGINX OAuth Proxy Module
Box Authenticator
NGINX Lua OAuth Proxy Plugin
Criipto Authenticator
Cloudflare Worker OAuth Proxy Module
Dropbox Authenticator
Entrust Authenticator
AWS API Gateway OAuth Proxy Module
Freja eID Authenticator
GitHub Authenticator
Azure API Management OAuth Proxy Policy
Instagram Authenticator
LinkedIn Authenticator
reCAPTCHA Authenticator
Salesforce Authenticator
Open Banking Brazil DCR Request Validation in Nginx
Slack Authenticator
StackExchange Authenticator
Twitter Authenticator
Username Password Authenticator
Windows Live Authenticator
Debug Attribute Authentication Action
Redirect Action Example
Send Email Action Example
Time Based Deny Authentication Action
Kong Dev Portal User Provisioner
Azure API Management User Provisioner
Salesforce Claims Provider
PBKDF2 Credential Data Access Plugin
MongoDB Data Access Plugin
Example Generic Consentor
RESTful Data Access Plugin
RESTful Emailer Plug-in
Twilio SendGrid Emailer Plugin
Amazon SQS Event Listener
Apigee Token Publisher Event Listener
Apigee Split Token Publisher Event Listener
AWS Split Token Publisher Event Listener
Client Authentication Attempt Counter
Cloudflare Token Publisher Event Listener
RESTful SMS Sender Plugin
Tele2 SMS Plugin

Overview

Architecture

Learn More

Solutions

Customer Stories

Resource Library

Tutorials & Guides

Learn More

Tutorials

Getting Started

How-tos

Code Examples