An Application (Web/SaaS/Mobile) can have several pages, menus, and functions that should be visible to a certain group of people/users. Depending on the user’s permissions or roles, the resources that they can access will vary. There are two ways that we can control application functions in an application Based on…

Native apps are applications that are developed for a specific operating system that they use. These applications have their own UIs and always tend to use REST APIs in order to provide a better user experience. There is a common myth in the developer mindset that building native applications provide…

Auser store is one of the key components in an IAM solution. As the name suggests user-store is utilized in storing user information or user identity data. User identity information is categorized as critical data of an organization. If this information is breached, the trust towards the organization and the…

Hashing with a Salt OR Asymmetric Encryption :) One common request that came to me from my clients during BANT calls is “Can’t we encrypt passwords of users in WSO2 Identity Server ?” or “ Is it possible to encrypt user passwords or challenge Question answers?” I am always wondered why they are asking these questions. Then, I…

Today I am going to discuss another aspect of Guest User account scenario which described here in Johan’s blog Why we need a Guest User Account? At a glace a guest user account is a temporary user account that a user can use for a defined period of time. …

1. Multi-Factor Authentication of WSO2 Identity Server enables compliance with ISO 27000–9.Access control Relying only on one authentication factor leaves your business solution with a single point of failure, in the sense that if the knowledge, device, or biometric pattern is compromised, anyone who has it can impersonate the user. This can lead to a huge data breach. …

WSO2 Identity Server(IAM) is a fully OAuth2.0 and OpenID Connect compliant CIAM product which allows users to easily experience Single Sign-On with OpenID connect and delegate access to resources through OAuth2.0. This blog will give you a simpler view of the most commonly used grant types how we can try…

WSO2 Identity Server는 이제 NAVER로 로그인을 지원합니다. — NAVER Co., Ltd. is the South Korea’s largest web search engine, as well as a global ICT brand that provides services including LINE messenger, currently with over 200 million users from around the world, the SNOW video app, and the digital comics platform NAVER WEBTOON. In simple terms, NAVER is…

Many users who prefer to use WSO2 Identity Server has this question in their mind. How to plug our existing user store to the WSO2 Identity Server? If you already have a legacy system and if you have requirements to migrate to a modern authentication system with all Identity and…