DEV Community

#identity

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
SAML RelayState is state, not an authorization claim

SAML RelayState is state, not an authorization claim

Comments
3 min read
Refresh Token Rotation Without Breaking Every Session

Refresh Token Rotation Without Breaking Every Session

Comments
3 min read
IBM Put a Name on the Agent. The Revoke Still Has to Be Yours.

IBM Put a Name on the Agent. The Revoke Still Has to Be Yours.

Comments
4 min read
Our Right to Work Checks Are Going Digital and Our Onboarding Still Expects a Photocopy

Our Right to Work Checks Are Going Digital and Our Onboarding Still Expects a Photocopy

Comments
2 min read
Identity should not start with another account

Identity should not start with another account

Comments
2 min read
Her Session Was Stolen From the Family Computer and Our Second Factor Never Saw It

Her Session Was Stolen From the Family Computer and Our Second Factor Never Saw It

Comments
2 min read
Tokens Outlived Passwords, and Most Identity Programmes Did Not Notice

Tokens Outlived Passwords, and Most Identity Programmes Did Not Notice

1
Comments
4 min read
Token spraying: 200,000 sign-in attempts and 497 that worked, without a single password

Token spraying: 200,000 sign-in attempts and 497 that worked, without a single password

Comments
4 min read
Consented applications are the software supply chain nobody audits

Consented applications are the software supply chain nobody audits

Comments
3 min read
The Windows LAPS password history is a privilege boundary, and its ACL is the thing to review

The Windows LAPS password history is a privilege boundary, and its ACL is the thing to review

Comments
3 min read
35,111 responses contain the AD FS login path, and 20,623 of them answer on 443

35,111 responses contain the AD FS login path, and 20,623 of them answer on 443

1
Comments
3 min read
Read-Only Was Never Harmless: Identity Lessons from CVE-2026-114625

Read-Only Was Never Harmless: Identity Lessons from CVE-2026-114625

Comments
2 min read
1,089,053 LDAP Services: Directory Exposure as a Reconnaissance Surface

1,089,053 LDAP Services: Directory Exposure as a Reconnaissance Surface

Comments
3 min read
The Web Stack You Cannot Ignore in 2026

The Web Stack You Cannot Ignore in 2026

Comments
3 min read
Ways to Generate IDs in JavaScript

Ways to Generate IDs in JavaScript

1
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.