18 docs tagged with "jwt-token"

Authorize service-to-service and partner API access with Access Pass Personal Access Tokens (PAT) instead of JWTs.

cidaas provides fine-grained authorization beyond OAuth2 scopes and group/role restrictions through the OpenID AuthZEN standard. AuthZEN separates policy administration from policy decision and supports attribute-based policies (Rego/OPA), external data via Policy Information Points (PIP), and Relationship-Based Access Control (ReBAC).

Overview

This flow can be reimplemented and integrated into their own pages and platform directly using the cidaas APIs

When a user logs out of your application, you need to properly end their session with cidaas to ensure they're logged out from all applications using the same cidaas instance. This guide explains how to implement logout using OpenID Connect specifications.

This is a technical guide on how to implement the FIDO2 authentication by simply following the steps below.

Overview

Group Role Restriction controls who can log in to an application by verifying group membership and roles during authentication. When verification succeeds, selected hints embed the matching groups and roles into the JWT access token so your application can see why access was granted — without loading every group the user belongs to.

Integrating cidaas with your business is simple and can be done for the Admin and User Service portals.

cidaas supports OAuth2 and OpenID Connect (OIDC) for Single Sign-On (SSO) authentication. You can configure cidaas to act as an Identity Provider (IdP) or as a Service Provider (SP).

Permission management may sound complex, but in simple terms, it is security for your resources.

Learn how scopes work in OAuth2/OIDC and how to configure and manage scopes and scope groups in cidaas.

Session management lets users stay signed in across applications and devices. This guide explains how sessions relate to OAuth 2.0 and OpenID Connect in cidaas, and points you to the right flows for validation, logout, and native-to-web handoff.

Native applications (for example mobile apps) often open company-owned web applications in the system browser: centralized profiles, webshops, help portals, and similar. Those sites typically expect an active IdP session in the browser—the same kind of session that powers Single Sign-On (SSO) for pure web apps—not only a token inside the native app.

Integrating Social Login in cidaas

This is a technical guide on how to implement the TOTP authentication by simply following the steps below.

This is a technical guide on how to implement the TOUCHID authentication by simply following the steps below.

Overview