Newsletter Studio* our.umbraco.com

Konstrukt* our.umbraco.com

Page Not Found Manager our.umbraco.com

Contentment our.umbraco.com

Backoffice Themes our.umbraco.com

Forum our.umbraco.com

Download our.umbraco.com

Documentation our.umbraco.com

Blog Posts our.umbraco.com

Meetups meetup.com

#h5yr h5yr.com

CodeGarden Conference codegarden20.com

Candid Contributions candidcontributions.com

24 Days In Umbraco 24days.in

WSO2 Identity Server wso2.com

Identity Server which provides modern identity and access management capabilities that can be easily built into organization's customer experience (CX) applications.

MiniOrange OAuth SSO wordpress.org

Wordpress OAuth and OpenID Connect plugin developed and actively maintained by MiniOrange.

Symfony Security symfony.com

PHP Security component with OpenID Connect support.

Mike Jones: Self-Issued self-issued.info

Mike Jones blog posts about OAuth 2.0 and OpenID Connect.

SecureAuth secureauth.com

Identity security platform that provides OpenID Connect Provider capabilities.

SailPoint sailpoint.com

Enterprise identity security platform that provides OpenID Connect Provider capabilities.

golang.org/x/oauth2 pkg.go.dev

Official Golang client implementation for OAuth 2.0 spec with OpenID Connect support.

PingFederate pingidentity.com

Federation server that provides secure single sign-on, API security and provisioning for enterprise customers, partners, and employees.

2012 - Getting Started with OAuth 2.0 by Ryan Boyd oreilly.com

OpenID Shared Signals Framework Specification 1.0 openid.net

Shared Signals Framework (SSF) enables sharing of signals and events between cooperating peers that enables multiple applications such as Risk Incident Sharing and Coordination (RISC) and the Continuous Access Evaluation Profile (CAEP).

OpenID Provider Authentication Policy Extension 1.0 openid.net

Specifications about a mechanism by which a Relying Party can request that particular authentication policies like multi-factor authentication be applied by the OpenID Provider.

Financial-grade API Security Profile 1.0 - Part 2: Advanced openid.net

Advanced security profile of OAuth that is suitable to be used for protecting APIs with high inherent risk in the context of Financial-grade APIs.

Financial-grade API Security Profile 1.0 - Part 1: Baseline openid.net

Baseline security profile of OAuth that is suitable for protecting APIs with a moderate inherent risk in the context of Financial-grade APIs.

Financial-grade API: Client Initiated Backchannel Authentication Profile openid.net

Financial services profile specifications for Client Initiated Backchannel Authentication (aka CIBA).

OpenID Connect Federation 1.0 openid.net

Draft specifications for putting in place bilateral federations between to organizations.

OpenID Connect Session Management openid.net

Specifications about OpenID Connect session management.

OpenID Connect RP-Initiated Logout openid.net

Defines how a Relying Party can requests that the OpenID Connect provider log out the End-User by redirecting the End-User's User Agent to the OP's Logout Endpoint.

OpenID Connect Dynamic Client Registration openid.net

Mechanism for sender-constraining OAuth 2.0 tokens via a proof-of-possession mechanism on the application level which allows for the detection of replay attacks with tokens.

Initiating User Registration via OpenID Connect openid.net

Specifications for initiating user registration via OpenID Connect and create prompt.

OpenID Connect Front-Channel Logout openid.net

Logout mechanism that uses front-channel communication via the User Agent between the OpenID Connect provider (OP) and Relying Parties (RPs) being logged out that does not need an OpenID Provider iframe on Relying Party pages.

OpenID Connect Extended Authentication Profile (EAP) ACR Values 1.0 openid.net

Specifications for OpenID Connect Extended Authentication Profile (EAP) ACR Values which allows to request specific authentication methods and assurance levels.

OpenID Connect Discovery 1.0 openid.net

Mechanism for an OpenID Connect Relying Party to discover the End-User's OpenID Provider and obtain information needed to interact with it.

OpenID Connect Core 1.0 openid.net

Defines the core OpenID Connect functionality: authentication built on top of OAuth 2.0 and the use of Claims to communicate information about the End-User. It also describes the security and privacy considerations for using OpenID Connect.

OpenID Connect Back-Channel Logout openid.net

Logout mechanism that uses direct back-channel communication between the OpenID Connect provider (OP) and Relying Parties (RPs) being logged out.

OpenID Connect Client-Initiated Backchannel Authentication Flow - Core 1.0 openid.net

Specifications for Client-Initiated Backchannel Authentication (CIBA) flow.

JWT Secured Authorization Response Mode for OAuth 2.0 (JARM) openid.net

JWT-based mode to encode OAuth authorization response parameters with additional claims used to further protect the transmission.

FAPI 2.0 Security Profile openid.net

New version of the FAPI security profile that is suitable for protecting APIs with a high inherent risk in the context of Financial-grade APIs.

FAPI 2.0 Message Signing openid.net

API security profile for signing and verifying certain FAPI 2.0 Security Profile based requests and responses.

FAPI 2.0 Attacker Model openid.net

Security goals, attacker models and security mechanisms for Financial-grade APIs.

OpenID AuthZEN openid.net

Standardized API for requesting access decisions from an authorization service in order to ease integration between services.

OpenID openid.net

The OpenID Connect official website.

Curity Playground oauth.tools

Tools for exploring and testing OAuth and OpenID Connect flows.

OAuth oauth.net

The OAuth website maintained by Aaron Parecki which list different resources about the protocol.

OAuth Mock Server oauth.kogiqa.com

A free and open-source OAuth mock server that simulates the biggest providers just by replacing the URL. Useful for E2E testing.

OAuth.com Playground oauth.com

OAuth 2.0 / OpenID Connect Playground with authorization flows and step by step of the process of obtaining an access token.

Nacho nacho.cerberauth.com

An OAuth 2.0 client creation helper helping to choose the right grant type depending on the application.