Posts

Tools to Trace OIDC Flows (OAuth flows)

Tools to Trace OIDC Artifacts and Flows Browser Developer Tools : The Network tab in your browser's developer tools (DevTools) is one of the easiest ways to trace HTTP requests, including those involved in OIDC authentication. You can see: The request to Okta's authorization endpoint (for the /authorize request). The redirect back to your app with the code (authorization code). The request to Okta's token endpoint (to exchange the authorization code for an access token and ID token). The response that contains the tokens (JWTs). If you look at the network activity during login, you'll see the various redirects, HTTP requests, and responses. This is helpful for understanding the different stages of the OIDC flow. Postman : Postman can be very useful for manually simulating the OIDC flow. You can configure requests for: The /authorize endpoint to initiate the login flow. The /token endpoint to exchange the authorization code for tokens. This allows you to interact w
Post a Comment
Read more

Difference between JDK installers - Compressed Archive, Installer and MSI Installer

Image
When downloading the JDK (Java Development Kit), one is presented by different types of installers, e.g., MSI installer, or the compressed archive version or the plain Installer version. See screenshot that shows the three types of installers available. Which one you would choose depends on whether you want the JDK for your personal Development environment or for your team/enterprise. See below brief explanations for the type of installer. Note, the screenshot shows the versions available for Windows Operating System. URL to download the JDK , Java SE Development Kit  https://www.oracle.com/java/technologies/downloads/#jdk21-windows (a) If you are an individual developer then choose the second option of "x64 Installer". This is an exe file (for Windows as shown in below screenshot) that launches the installation wizard which is straight forward. (b) However, if you need an installer for your team environment or enterprise then choose the "x64 MSI Installer". This in
1 comment
Read more

Azure AD account vs On-premise AD account

Account in Active Directory (AD) and account in Azure AD (AAD) Here AD is being referred to as the on-premise AD and  Azure AD (AAD) is the cloud based Active Directory. Here are two scenarios of user accounts.   The AAD user accounts are called as M365 accounts that are required to access MS services in the cloud, like M365 tenants, Exchange online mailboxes etc. Scenario: You only have Azure AD account, and an Exchange online mailbox. In this scenario how are the credentials synced. There is no syncing. Azure AD account acts as the single identity source for accessing both Azure AD and Exchange Online. The Azure AD account is the authoritative source for your identity and credentials. When you are assigned an Exchange Online mailbox, it is linked to your existing Azure AD account. Your Azure AD credentials (username, password) are used to authenticate and access both  Azure AD and your Exchange Online mailbox. There is no synchronization of credentials happening because the Azure AD
Post a Comment
Read more

Quantum resistant Cryptography (Entrust Guide)

Image
  A COMPREHENSIVE GUIDE TO QUANTUM-RESISTANT CRYPTOGRAPHY AND ENCRYPTION While still in their early stages of development, quantum computers are set to change the world — and that includes the ability to break the cryptography and encryption we use today. Quantum computers are approaching the computing power and stability needed to  break public-key encryption protocols . The time to migrate to post-quantum cryptography is now. What is a Quantum Computer? Quantum computers  apply the properties of quantum mechanics to processing power. This allows them to perform highly complex computations significantly faster than classical computers. Before you can understand quantum computing, you must first wrap your mind around the “qubit.” In traditional computing, the basic unit of memory is a “bit,” which represents either a one or zero. On the other hand, a qubit can represent one, zero, or even a combination of them both at the same time — a phenomenon referred to as “superposition.” When cl
Post a Comment
Read more