Cybersecurity & Identity Technologies
Protect access, applications and data through standards-based security architecture.
Security works best when identity, application design, cloud controls and delivery practices are integrated instead of added later.
Themes
What this area covers
AuthenticationAuthorizationSSOFederationSecure developmentAPI securityZero trust principles
Selection
Selection criteria
- User population
- Risk level
- Regulatory environment
- Federation needs
- Machine identity
- Developer experience
Technologies
Cybersecurity & Identity technologies
OAuth 2.0
Security Standard
Authorization framework for delegated access to applications and APIs.
OpenID Connect
Identity Standard
Identity layer on OAuth 2.0 for modern application authentication.
SAML
Identity Standard
Enterprise federation standard commonly used for workforce single sign-on.
Keycloak
Identity Platform
Open-source identity and access management platform.
OWASP Practices
Security Practice
Widely used application-security knowledge and guidance ecosystem.
Architecture before stack
Have a stack already—or need help choosing one?
Tell us what you are building, what already exists and the constraints that matter.