Read any OAuth documentation, and they go at length to discuss the fact that OAuth is not an authentication protocol. While there are authentication steps embedded within the OAuth protocol none of these authentication steps are valid for end-user authentication.

I break down and go into detail around the OAuth process and how it works as one of the defining protocols that’s used in the Microsoft Identity Platform.

Managed Service Identities for VMs seem like a great alternative to service principals, but after utilizing them on virtual machines, I am not so sure. I explore recent findings with MSI’s and why you may want to reconsider their use.

This series aims to go-over, in detail, the Microsoft Identity Platform and how the underlying components work to create secure authorization and authentication systems.

Testing container deployments doesn’t have to be difficult. The arrival of docker has allowed for a portable unit of software to be available on most types of machines and OS. More and more developers are using docker in their deployment and development workflows. Why not security test with docker as well?

Wordpress is used by 33% of all websites on the internet. While it has many great things going for it. It’s time to take a real hard look at the security risks that it has going against it.