Articles Getting Started How-tos Guides Code Examples Documentation Videos Webinars Courses Documents

Tutorials

In the Tutorials section, you can find more detailed guides describing common scenarios using the Curity Identity Server. You can follow them step by step or use them as reference for common tasks.

How-tos

Detailed guides for common scenarios using the Curity Identity Server.

Authenticate using Azure AD
Authenticate With Google Authenticator
Control Authentication using Actions
How to Add Authentication Actions
Authentication Actions Example
Action Bundles
How to Use Azure AD for credential verification
Geo-Location Authenticator Filter
Account Linking With Social Identity Providers
Account Creation after Login
Scripted Attribute Transformation
Sign in with Apple
User Account Lockout
WebAuthn Authenticator
Preregister Devices in a WebAuthn Authenticator
Using Multi-Factor WebAuthn Devices
Migrating to Passwordless
Opt-in Multi-Factor Authentication
Authenticate using Signicat
User behavior MFA using the BehavioSec Authenticator
Beyond Identity Integration using OIDC Authenticator
SITHS Authentication With Attributes From Active Directory
Integrating with SAML Identity Providers
Using the Dynamic Authenticator
Handling Expired Sessions during Authentication
Code Flow
Implicit Flow
Hybrid Flow
Client Credentials Flow
Refresh Tokens
Revoking OAuth Tokens
Resource Owner Password Flow
User Consent
Device Authorization Grant
Configuring Proof Key for Code Exchange
Non-Templatized Dynamic Client Registration
Templatized Dynamic Client Registration
Custom DCR Request Validation
Using Pairwise Pseudonymous Identifiers
Entitlements in Introspection
JWT Assertions
Using JWT Authorization Requests
Using Pushed Authorization Requests
Consuming responses with JWT Security Authorization Response Mode
Running a CIBA Flow
Using Subject Alternative Names to Authenticate an OAuth Client
Strengthen OAuth Client Credentials in a Service Mesh
Token Designer Overview
Custom Token Issuer
Working With Claims
Adding Claims from Authentication
Implementing Custom Claims
EdDSA Signatures in Tokens
Implementing Impersonation
Implementing Dynamic User Routing
Issuing Verifiable Credentials
Verifiable Credentials Issuance with Pre-authorized Code
Introduction to the CLI
Import and Export Configurations
Keys, Certificates and Trust Stores
GitOps Configuration Management
Automate Certificate Renewal
Docker Container Customization
Exposing the Curity Identity Server Using ngrok
Running in Cluster Mode
Clustering with Docker Compose
Testing the Curity Identity Server
AWS Deployment Overview
Install on AWS using CloudFormation
Install on AWS using the CDK
Azure Deployment Overview
Kubernetes Local Installation
Deploy to Google Kubernetes Engine (GKE)
Deploy to Elastic Kubernetes Service (EKS)
Deploy to Azure Kubernetes Service (AKS)
Deploy to an Istio Service Mesh
Kubernetes Auto Scaling
Encrypted Configuration using Helm
Configuration Backups and Logging using Helm
Access DynamoDB using IAM Role for Service Accounts
Using AD for Admin UI Users
Federated Login to the Admin UI
DevOps Dashboard Overview
Token Signing Key Rotation
Curity Access Control Rules
Authorization Rules for the RESTCONF API
Configuring Redirect URI Policies
Using DKIM
Integrating PKCS#11-based High Security Modules
Endpoints and their URLs
Running the Curity Identity Server in a Multi-Tenant Architecture
User Management with SCIM
User Management with GraphQL
Database Client Management with GraphQL
Running the DevOps Dashboard
Scope Authorization Manager
Groups Authorization Manager
Attribute Authorization Manager
Implementing Role Based Security
Email Activation When Using SCIM
Migrating from Spring Security OAuth to Curity Identity Server
Migrating from Keycloak
Migrating from IdentityServer4
Design your Look and Feel
Fast Look and Feel Customization with the Admin UI
Extended Look and Feel Customization with the UI Builder
Single Brand Customization Example
Multi-Brand Customization Example
Email Customization Example
How to Customize Password Validation
Customizing User Consent
The Grafana Dashboard for the Curity Identity Server
Per-client Debug Logging in Production Environments
Log Aggegation to Splunk
Log Aggregation to Datadog
Log Aggregation to Elasticsearch
Health and Auto Healing
Integrate Alarms with Cloud Monitoring
Java Runtime Monitoring
How to Record a Browser Trace
Integrating with the Apache mod_auth_openidc module
Configuring Curity Identity Server as an Identity Provider in Salesforce
Configuring Curity Identity Server as an Identity Provider in Cloudflare
Integrating with Azure Active Directory
Setting up OpenID Connect in MuleSoft Anypoint
Setting up OpenID Connect Authentication in the Kong Developer Portal
Integrating with Tyk Developer Portal
Integrating with the Jetty "openid" module
Logging client IP address to the audit database
OAuth Customization using Scripting
OAuth Customization using Plugins
Simple Authentication Action
Generic Consentor Plugin
Attaching a Remote Debugger
OAuth Introspection and Phantom Tokens
NGINX Phantom Token Module
Integrating with Kong Enterprise
Integrating with Kong Open Source
Integrating with OpenResty
Integrating Curity Identity Server with Apigee Edge
Microsoft Azure API Management
Integrating the Curity Identity Server with AWS API Gateway using the Phantom Token Pattern
Integrating With the Broadcom CA Layer7 API Gateway
Integrating the Curity Identity Server with API Gateways using the Phantom Token Pattern
Integrating Curity Identity Server with Apigee Edge using the Split Token Approach
Integrating the Curity Identity Server with AWS API Gateway using the Split Token approach
Integrating with the Cloudflare Gateway
NGINX OAuth Proxy Module
NGINX Lua OAuth Proxy Plugin
Cloudflare Worker OAuth Proxy Module
AWS API Gateway OAuth Proxy Module
Azure API Management OAuth Proxy Policy
Dynamic User Routing with NGINX
Dynamic User Routing with Kong Open Source
Dynamic User Routing with Cloudflare Gateway
Dynamic User Routing with Cloud Platforms
Integrating Plugins in a Kubernetes Ingress
API Authorization using Open Policy Agent and Kong
Open Banking Brazil DCR Request Validation
Web Client Setup for the Hypermedia Authentication API
Android Client Setup for the Hypermedia Authentication API
iOS Client Setup for the Hypermedia Authentication API
HAAPI WebAuthn Native Mobile Configuration
Android Integration of the HAAPI Mobile UI SDK
iOS Integration of the HAAPI Mobile UI SDK
HAAPI Mobile Username Password Flows
Customizing the Android HAAPI Mobile Login User Experience
Customizing the iOS HAAPI Mobile Login User Experience
HAAPI Mobile Advanced Authentication Flows
HAAPI Mobile Security Lifecycle
Implementing HAAPI Fallback

Code Examples

Example code for SDK components, integrations and APIs

Securing a Spring Boot API with JWTs
Securing a Java API with JWTs
Securing a Kotlin API with JWTs
Securing a .NET API with JWTs
Securing a Go API With JWTs
Securing a Node.js Express API with JWTs
Securing a Python Flask API with JWTs
Securing a Symfony API with JWTs
Securing a Serverless API with JWTs
Securing a Serverless API on Vercel using JWTs
Mutual TLS Secured API
API Access via JWT Assertions
Securing API Events using JWTs
SPA using the Token Handler Pattern
Token Handler Deployment Example
Node.js OAuth Agent
Kotlin OAuth Agent
.NET OAuth Agent
Next.js OAuth Agent
Financial-Grade OAuth Agent
Javascript SPA using Assisted Token Flow
Javascript SPA using OAuth Assistant Library
Javascript SPA using Code Flow + PKCE
React SPA using Assisted Token Flow
Angular SPA using Assisted Token Flow
Hypermedia Authentication API React Demo
OpenID Connect Client with Spring Security
OpenID Connect Client with .NET
OpenID Connect Client with .NET Framework
OpenID Connect Client with Node.js Express
OpenID Connect Client with Python
OpenID Connect Client with Java Undertow
MITREid Connect Client Library
OpenID Connect Client with Mutual TLS Client Authentication
OpenID Connect Client with Encrypted ID Tokens
Kotlin Android App using AppAuth
Kotlin Android App using HAAPI
Swift iOS App using AppAuth
Swift iOS App using HAAPI
Mobile Dynamic Client Registration
Mobile Web SSO
Testing Zero Trust APIs
Alarm Integration Plug-in
Mobile Setup with ngrok
BehavioSec Authenticator
Bitbucket Authenticator
Box Authenticator
Criipto Authenticator
Dropbox Authenticator
Entrust Authenticator
Freja eID Authenticator
GitHub Authenticator
Instagram Authenticator
LinkedIn Authenticator
Nonce Authenticator
reCAPTCHA Authenticator
Salesforce Authenticator
Slack Authenticator
StackExchange Authenticator
Twitter Authenticator
Username Password Authenticator
Windows Live Authenticator
Choose Account Authentication Action
Debug Attribute Authentication Action
Redirect Action Example
Send Email Action Example
Time Based Deny Authentication Action
Kong Dev Portal User Provisioner
Azure API Management User Provisioner
Microblink BlinkID Authentication Action
PBKDF2 Credential Data Access Plugin
Salesforce Claims Provider
Example Generic Consentor
MongoDB Data Access Plugin
RESTful Data Access Plugin
RESTful Emailer Plug-in
Twilio SendGrid Emailer Plugin
Amazon SQS Event Listener
Apigee Token Publisher Event Listener
Apigee Split Token Publisher Event Listener
AWS Split Token Publisher Event Listener
Client Authentication Attempt Counter
Cloudflare Token Publisher Event Listener
RESTful SMS Sender Plugin
Tele2 SMS Plugin
XACML Authorization Manager
Open Policy Agent Authorization Manager
Long-Lived Tokens on Refresh Procedure Plugin

Overview

Architecture

Learn More

SECURITY SOLUTIONS

INDUSTRY

Customer Use Cases

Resource Library

Tutorials & Guides

Learn More

Tutorials

Getting Started

How-tos

Code Examples

Start Today