Identity 2.0: the what, why and how of social and federated login
summary
Authentication is risky and cumbersome so the talk argues for outsourcing it to external providers to reduce password breaches and user friction, and demonstrates an identity broker setup using Keycloak identity broker to translate between SAML (via mod_auth_mellon) and OpenID Connect JWT flows. The demo configures GitHub OAuth and a FreeIPA/LDAP backend but the live demos mostly fail due to networking and credential misconfiguration, illustrating real-world deployment fragility.
AI-written summary · about
chapters (12)
- 0:00Introduction to federated login
- 1:05Benefits of federated identity
- 2:26How federated authentication works
- 5:13Identity providers and contexts
- 6:42Motivations and security trade-offs
- 10:46Challenges of social login
- 14:41Protocol-level authentication flows
- 23:15The role of identity brokers
- 27:28Live demonstration
- 54:40Framework and implementation tips
- 59:21Security best practices
- 1:09:01Q&A and concluding remarks
related talks
32mModern And Secure IAM For Modern Applications
18mOne Identity to Rule Them All
34mWho Are You? I Really Want to Know… the Magic Behind OIDC
08mModern Identity Management and Learning from Developers Around the World
37mCustomer Identity for Modern Apps and APIs
19mIdentity:The missing link in API security
33mPractical Federated Identity
36mTo Identity and Beyond