Identity Providers (IdP) and Federated Identities Explained – Nicki’s Tech Blog
My previous article, Authentication and Authorization, covered how you accessed a given system. If you aren’t familiar with these terms, it may be a good refresher! An everyday example of an IdP is the state which issues your driver’s license. Business trust the state to verify your identity before issuing the license and therefore accept the license as proof of your identity. Today, applications serving your requests, or webpages, may not be the system which authenticated you. In these cases, the applications delegate the authentication to an Identity Provider (IdP). Consider a website which uses your Google account to authenticate. In this case, this website is delegating the authentication to Google to validate your login credentials. Google is the IdP. Facebook is another example of an IdP. There are a couple of key points to appreciate in the Google example: Federated Identity is the idea that an application trusts external Identity Provider (IdP) to authenticate a person (or syst
Identity Providers (IdP) and Federated Identities Explained – Nicki’s Tech Blog Skip to content December 22, 2022 Nicki Sonpar Cloud Computing , Cloud Identity , Cloud Security , Enterprise Cloud , Technology Career aws , cloud , cloudcomputing , google , identity , internet 1 comment on Identity Providers (IdP) and Federated Identities Explained Identity Providers (IdP) and Federated Identities Explained These are commonly used terms in the technology space. Understanding their definition and how they work is important to appreciate how systems are accessed. My previous article, Authent
Explore this link on the map →related reading
- Motivating The Case for Decentralized Social Identity: Part One - RadicalxChangeradicalxchange.org
- Why Identity Providers Aren't Enough to Secure Identities in the Cloud - Part Onepermiso.io
- Secure AI Agent & User Authentication | Auth0auth0.com
- Report: Identity Crisis: The Biggest Prize in Security | A Contrary Research Deep Dive | Contrary Researchresearch.contrary.com
- Intersectional Social Data - RadicalxChangeradicalxchange.org
- NIST and AI agents: 1Password’s approach to agent identity | 1Password1password.com
- Stytch - A better way to build authstytch.com
- Entra ID service principals in business email compromise schemes | Red Canaryredcanary.com
- Secure AI Agent & User Authentication | Auth0auth0.auth0.com
- Motivating The Case for Decentralized Social Identity: Part Two - RadicalxChangeradicalxchange.org
- Signing in with Google - OAuth 2.0 Simplifiedoauth.com
- Your Platform Is as Strong as Its Identity Layervarunshenoy.substack.com