This post on session discusses how an authenticated user can can access different resource within the same realm with a valid sessions. For successfully authenticated scenarios and for any access manager to maintain a connection between the user browsers and the backend server, session plays a pivotal role. As long…

Use the REST API to create OAUTH Artifacts Create OAM OAUTH Artifacts In this article, we will use OAM OAuth commands to create the artifacts that make the OAuth integration possible. For each Curl commands in the example shown, substitute values that match your configuration requirements. …

What is OpenID Connect Concepts OpenID Tokens (Structure) OIDC Claims OpenID Connect AuthN flows 3- legged authorization grant flow Implicit Grant Flow OpenID UserInfo endpoint OIDC discovery endpoint REST and JSON Tokens (JSON Web Tokens(JWT) ) Security OpenID Connect This article covers the core concepts of OIDC. You dont need to know…

(Proof Key for Code Exchange-OpenAM ) Public client interactions use PKCE flow, in this flow instead of using client secrets that have the potential to be compromised, a code challenge and code verifier is used. This flow suits Javascript applications or single page apps, where the secret cannot be stored…

Proof Key of Code Exchange (PKCE) Flow — Oracle Access Manager PKCE flow Access token generation Sample OAuth2.0 Authorization Code Request Sample Access token request 8 Access Token verification The 3 legged flow could be compromised if the client-id, secret and the authZ code parameters are got through Man in…

What is Authentication What is SSO Different types of Authentication User/Password Certificate FIDO (Fast Identity Online) Biometrics AuthN / SSO flow SSOTokenID HTTP Cookie Session Cookies Cross Domain Single Sign On (CDSSO) Grouping / Realm Session Termination CTS Session termination Session Upgrade: Session Quotas /Constraints ] Java Agents/ WebAgents/ WebGates (OAM)…

Proof Of Work (POW) Proof Of Stake (POS) Delegated Proof of Stake(DPOS) Longest Chain Rule Byzantine Fault Tolerance (BFT) POW Attacks Proof Of Importance (POI) Proof Of Burn (POB) — Proof Of Work, Proof Of Stake and Delegated proof of work are the ones used primarily in the Blockchain, besides a few others. A consensus algorithm is a protocol upon which the miners in the Blockchain agree before submitting the verified blocks to the Blockchain. In a decentralized setup like…

Topics Covered OAuth 2.0 Concepts OAuth 2.0 Actors 3-Legged Authorization Grant Flow 2-Legged flow PKCE Flow — OAuth 2.0 Concepts This story/article will theoretically explore the concepts, artifacts, and various OAuth flow actors and how these artifacts combine to protect resources. The principle behind OAuth flow is the token retrieval and the use of that token to access a resource. OAuth 2.0 and OIDC flow falls under the federated Single…

What is Ethereum Blockchain, Ethereum Virtual Machine (EVM), GWEI, Gas Fee, ERC 20 standards, EVM functional components. — Ethereum is an open-source blockchain on which Ether is the token that can be mined. As per the Ethereum site, “Ethereum is the community-run technology powering the cryptocurrency, ether (ETH) and thousands of decentralized applications”. The core engine that powers Ethereum is the Ethereum virtual machine(EVM). It is a blockchain…