<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>OAuth2 &#8211; Noise</title>
	<atom:link href="https://noise.getoto.net/tag/oauth2/feed/" rel="self" type="application/rss+xml" />
	<link>https://noise.getoto.net</link>
	<description>The collective thoughts of the interwebz</description>
	<lastBuildDate>Thu, 16 May 2024 16:57:51 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.8.2</generator>
	<item>
		<title>How to set up SAML federation in Amazon Cognito using IdP-initiated single sign-on, request signing, and encrypted assertions</title>
		<link>https://noise.getoto.net/2024/05/16/how-to-set-up-saml-federation-in-amazon-cognito-using-idp-initiated-single-sign-on-request-signing-and-encrypted-assertions/</link>
		
		<dc:creator><![CDATA[Vishal Jakharia]]></dc:creator>
		<pubDate>Thu, 16 May 2024 16:57:51 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon Cognito]]></category>
		<category><![CDATA[authentication]]></category>
		<category><![CDATA[OAuth2]]></category>
		<category><![CDATA[SAML]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=911d8b056a8aaf0abde84fae1f3709ba</guid>

					<description><![CDATA[When an identity provider (IdP) serves multiple service providers (SPs), IdP-initiated single sign-on provides a consistent sign-in experience that allows users to start the authentication process from one centralized portal or dashboard. It helps administrators have more control over the authentication process and simplifies the management. However, when you support IdP-initiated authentication, the SP (Amazon […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Reduce risk by implementing HttpOnly cookie authentication in Amazon API Gateway</title>
		<link>https://noise.getoto.net/2023/01/30/reduce-risk-by-implementing-httponly-cookie-authentication-in-amazon-api-gateway/</link>
		
		<dc:creator><![CDATA[Marc Borntraeger]]></dc:creator>
		<pubDate>Mon, 30 Jan 2023 20:14:34 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[api gateway]]></category>
		<category><![CDATA[authentication]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[Http-Only cookie]]></category>
		<category><![CDATA[OAuth2]]></category>
		<category><![CDATA[OpenID Connect]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=4d107efdceaaa5adcd8daaf3ebc55dc4</guid>

					<description><![CDATA[Some web applications need to protect their authentication tokens or session IDs from cross-site scripting (XSS). It’s an Open Web Application Security Project (OWASP) best practice for session management to store secrets in the browsers’ cookie store with the HttpOnly attribute enabled. When cookies have the HttpOnly attribute set, the browser will prevent client-side JavaScript […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>How to set up Amazon Cognito for federated authentication using Azure AD</title>
		<link>https://noise.getoto.net/2021/11/19/how-to-set-up-amazon-cognito-for-federated-authentication-using-azure-ad/</link>
		
		<dc:creator><![CDATA[Ratan Kumar]]></dc:creator>
		<pubDate>Fri, 19 Nov 2021 18:06:50 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon Cognito]]></category>
		<category><![CDATA[Identity]]></category>
		<category><![CDATA[OAuth2]]></category>
		<category><![CDATA[OIDC]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=55c24871220ba7699b0da5435219cf3c</guid>

					<description><![CDATA[In this blog post, I’ll walk you through the steps to integrate Azure AD as a federated identity provider in Amazon Cognito user pool. A user pool is a user directory in Amazon Cognito that provides sign-up and sign-in options for your app users. Identity management and authentication flow can be challenging when you need […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Implement OAuth 2.0 device grant flow by using Amazon Cognito and AWS Lambda</title>
		<link>https://noise.getoto.net/2021/11/02/implement-oauth-2-0-device-grant-flow-by-using-amazon-cognito-and-aws-lambda/</link>
		
		<dc:creator><![CDATA[Jeff Lombardo]]></dc:creator>
		<pubDate>Tue, 02 Nov 2021 17:49:00 +0000</pubDate>
				<category><![CDATA[Amazon Cognito]]></category>
		<category><![CDATA[Amazon DynamoDB]]></category>
		<category><![CDATA[AWS IoT]]></category>
		<category><![CDATA[AWS Lambda]]></category>
		<category><![CDATA[Device grant]]></category>
		<category><![CDATA[Expert (400)]]></category>
		<category><![CDATA[Identity]]></category>
		<category><![CDATA[OAuth2]]></category>
		<category><![CDATA[OIDC]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=bad2686f9cc6d40763f2fd67816cb1fd</guid>

					<description><![CDATA[In this blog post, you’ll learn how to implement the OAuth 2.0 device authorization grant flow for Amazon Cognito by using AWS Lambda and Amazon DynamoDB. When you implement the OAuth 2.0 authorization framework (RFC 6749) for internet-connected devices with limited input capabilities or that lack a user-friendly browser—such as wearables, smart assistants, video-streaming devices, […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
	</channel>
</rss>

<!--
Performance optimized by W3 Total Cache. Learn more: https://www.boldgrid.com/w3-total-cache/

Object Caching 34/130 objects using Memcached
Page Caching using Disk: Enhanced 
Lazy Loading (feed)
Database Caching using Memcached

Served from: noise.getoto.net @ 2025-12-11 17:50:47 by W3 Total Cache
-->