API Security Blogs

Should you build or buy identity for your app? Application teams are in a unique position to build authentication, registration and other services themselves, or purchase a solution. This high-level overview of the pros and cons will help guide you to making the right decision for your application.

Learn how to shore up your API security and help prevent costly data breaches. This article reflects on 16 years of experience implementing API security, shares lessons learned from notorious hacks, and explores the prospect of emerging security patterns leveraging machine learning.

Complying with Open Banking UK standards can be addressed with Pingfederate, PingAccess, and PingDirectory products. Learn how to enable open banking dynamic client registration with Ping Identity.

Previously, we presented an overview of Identity Gateway and how it fits into your organization’s IAM.

The use of the OAuth2 Authorization Code Grant or OIDC Authorization Code Flow with a Public Client with Single Page Applications (SPAs) is on the rise. Learn why.

The recent Facebook data breach exposed both the need for stronger protection for API infrastructures and the challenge facing those tasked with API security. Read the blog to learn how PingIntelligence for APIs can help you address this challenge.

Complying with Open Banking UK standards can be addressed with Pingfederate, PingAccess, and PingDirectory products. Learn how to enable open banking dynamic client registration with Ping Identity.

Click to read Barry O'Donohoe's blog post about PSD2, Open banking and OAUTH 2.0 for API Security.