API Security Blogs

Should you buy or build your customer identity and access management (CIAM) system? Learn why buying a CIAM solution provides the enterprise with greater benefits, such as a more secure and future-proof system, and leads to a superior customer experience.

To help enterprises effectively combat API security risks, the OWASP Foundation created the OWASP API Security Top 10 project. Learn about the dangers this project describes and how Ping Identity’s data governance, API cybersecurity and access management solutions can be leveraged to mitigate these risks.

PingOne for Customers includes user (and app) roles that govern the ability to perform actions with regard to the software. Granting permissions to users and applications via roles enables you to ensure appropriate controls and collaboration while balancing security needs.

The flow of the client credentials grant type of the OAuth 2.0 spec is broken down in an easy-to-understand way, with recommendations on when to use it. Learn about specific use cases and how PingOne for Customers worker apps use this grant type to authenticate and get access tokens.

If you’re planning to implement Apple’s new Sign In with Apple feature, read this article first. You’ll get some helpful tips and guidance from a developer who’s already completed the implementation that can save you some time and frustration.

Get rid of pesky passwords to make your customers happy all the while making your app more secure with passwordless authentication. Passwordless authentication helps both developers and end users escape the friction of passwords while creating a great user experience.

Discover PingCentral, the self-service IAM application integration portal. This article lays out 4 use cases detailing how PingCentral is an enterprise game changer, allowing resource-constrained IAM teams to do more with less and accelerating digital transformation with rapid app onboarding.

The flow of the implicit grant type of the OAuth 2.0 spec is broken down in an easy to understand way with recommendations on when to use it.

Gain a better understanding of one of the most commonly used OAuth 2.0 grant types: the Authorization Code Grant Type (Auth Code). By examining the flow backwards, you’ll understand why the particular process came about and learn how you can use Auth Code to achieve a problem’s desired solution.