Collaborate Disseminate
We are trying to arrive at a solution for an enterprise app
Different Users – have different Authentiation Methods
User Type 1 – Password + Captcha
User type 2 – Biometric [Not device-based] + Password
User type 3 – Biometric [Device-bas… Continue reading OpenId with Biometrics
In Microservice architecture, public clients & confidential clients are there
as per API Gateway Pattern, Public clients connecting from Browser to backend reaches it via API Gateway
API Gateway does Authentication / Authorization and… Continue reading In Microservice Architecture, how to secure inter service to service
We have an application with HTML5, CSS3, Angular, single page or progressive, which depends stateless on the backend for APIs.
If the payload has private PII Data, the recommendation is to encrypt the entire packet.
What are the approaches… Continue reading Payload Security for Single Page app to back end REST Services
With regard to OAuth2, there are different grant types based on the client type
(first-party app) for Browser (SPA), Mobile App.
Use case:
For an Enterprise, there is a portal for the employees to login. A bank is an enterprise for this ex… Continue reading Multifactor Authentication Combination with OAuth2 for Various Clients [closed]