One Identity to Rule Them All
summary
The talk explains federated identity and Single Sign-On (SSO): why users don’t need separate accounts everywhere and how web apps delegate authentication to third parties. It covers the security basis of SSO, real-world examples like "Sign in with..." and FranceConnect, and gives a non‑deeply technical overview of the two main federation protocols, SAML and OpenID Connect (OIDC).
AI-written summary · about
chapters (6)
- 0:00Introduction
- 3:55Identity federation explained
- 6:23SAML and OIDC protocols
- 10:41OAuth 2.0 history
- 13:28Key considerations and limits
- 16:56Conclusion
related talks
01h 12mIdentity 2.0: the what, why and how of social and federated login
19mIdentity:The missing link in API security
24mIntroduction to OpenID Connect
34mWho Are You? I Really Want to Know… the Magic Behind OIDC
46mSecure SSO Authentication: Strategies to Eliminate Vulnerabilities
37mThe Seven Deadly Sins of Web Apps, or a Bit About SSO Bugs
36mTo Identity and Beyond
28mIdentity: From Legacy to Microservices