Latest
passkeys
Pass-the-Passkey Bypasses MFA Without Breaking FIDO2
More than 20 Pass-the-Passkey techniques abuse logging, session handling, and synced-key recovery. None break FIDO2. Do not freeze the rollout.
Read the article
Tag
All topics →Authentication
Authentication done right: passwords, passkeys, MFA, SSO, and the patterns that keep logins both secure and low friction.
124 stories, newest first.
SSO
Why We Switched From WorkOS to SSOJet for Enterprise SSO (and Saved $5,000 a Year)
GrackerAI switched enterprise SSO from WorkOS to SSOJet, cut the annual bill by roughly $5,000, and gained the custom authentication flexibility an AI platform needs.
passkeys
The Enterprise Passkey Migration Decision Framework: When Device-Bound vs. Synced Passkeys Actually Matter
A decision framework for enterprise passkeys: when device-bound hardware keys beat synced passkeys, mapped to user risk, device context, compliance, and total cost. Includes the three failure patterns that surface only after rollout.
WebAuthn
WebAuthn Level 3: What's New in the Passkey Standard
WebAuthn Level 3 was proposed for W3C Recommendation in July 2026. Encryption key derivation, cross-domain credentials, and automatic list syncing are now first-class. Here is what changed.
CIAM
Top 5 Enterprise CIAM Platforms in 2026: In-Depth Comparison
Auth0, Microsoft Entra External ID, Ping Identity, IBM Verify, and WSO2 compared for 2026: analyst rankings, agentic-identity launches, pricing, and which platform fits which enterprise.
CIAM
The Identity Tax: What Auth Actually Costs Per Closed Deal
Everyone argues about auth pricing. Almost nobody accounts for what identity actually costs per closed deal, or notices the invoice founders obsess over is the smallest of four identity costs.
Machine Identity
Credential Lifecycle for AI Agents: From 24-Hour to Ephemeral Tokens
A leaked static key is a disaster; a five-minute token is mostly a shrug. Here is the credential lifecycle that gets AI agents from 24-hour tokens to ephemeral ones.
Authentication
Authentication and Authorization in Microservices: What Works
In a monolith you check who someone is once. In microservices, every hop has to ask again. Here is how I design authentication and authorization across services: edge auth, per-service verification, workload identity with SPIFFE, and centralized policy.
passkeys
Passkeys Have a 93% Login Success Rate. Only 36% of Accounts Enroll.
Passkeys demo better than any login method ever shipped. Most deployments still cannot get anyone to turn them on. Both numbers are true.
authentication
AI Authentication: Verifying People, Agents, and Content
AI made it cheap to fake a face, a voice, and a video. Here is my working map of the three problems authentication now has to solve, and the tools that actually hold up in 2026: verifying people, verifying agents, and verifying content.
CIAM
AI Agents Don't Have Passwords. Your Auth Stack Assumes Everyone Does.
Your identity stack was architected for humans with browsers and thumbs. Agent traffic breaks consent, delegation, sessions, bot defence and audit at once.
Agentic AI
The Identity Mesh: Federated Trust for Multi-Agent AI
Agents can already prove who they are. What no standard has cleanly solved is passing scoped authority down a multi-hop chain across organizations. Here is the real state of agent identity in 2026, minus the blockchain hype.
Authentication
The Future of Authentication 2026-2030: How Five Converging Technologies Are Rebuilding Identity from the Ground Up
Passkeys, post-quantum crypto, silent network authentication, AI behavioral biometrics, and decentralized identity are fusing into one login stack. Here is what it looks like by 2030, and the two moves in 2026 that decide whether you are ready.
Authentication
Build vs Buy Auth Is the Wrong Question. Here's the Right One.
Every CTO re-litigates build vs buy for authentication every 18 months, and the framing is broken. The real question isn't build or buy. It's which parts of identity are commodity and which parts are your actual product.
Cybersecurity
FortiBleed: 74,000 Admin Credentials Cracked From Devices That Were Already Patched
74,000 Fortinet admin credentials cracked by GPU clusters from config backups stolen via old vulnerabilities. Patching the device wasn't enough.
CIAM
The CIAM Graveyard: Every Dead Identity Vendor and What Killed Them
Identity vendors rarely die of bankruptcy. They die of acquisition, then neglect, then a shutdown email. A complete history of every dead CIAM vendor, the pattern behind the deaths, and the questions that protect you from the next one.
CIAM
Auth0 Isn't Overpriced. You're Just the Wrong Buyer.
Whether Auth0 is too expensive depends entirely on who's asking. A framework for telling the regulated enterprise buyer (pay and negotiate) apart from the high-volume, cost-sensitive platform (migrate), with 2026 pricing and breach-cost data.
CIAM
Building Customer Identity at Scale: Lessons from 1 Billion Users
Scaling a CIAM platform past a billion users taught me that customer identity is a trust problem: progressive profiling, risk-based auth, and passwordless done right.
CIAM
5 Fast-Growing CIAM Providers Reshaping Identity Management in 2026
Okta and Microsoft no longer define the CIAM market alone. Five developer-first, passwordless-native, and AI-ready platforms are growing fast by solving the specific problems the incumbents leave unaddressed. Here is where each one fits in 2026.
Authentication
JWT vs Opaque Tokens: Choosing the Right API Token Strategy (2026)
JWT versus opaque tokens for API authentication: statelessness versus revocation, latency at global scale, blast radius, and the hybrid pattern most large deployments use.
Mobile Security
eSIM vs iSIM vs SIM: Which Is Actually More Secure?
"Is eSIM safer than a physical SIM?" has a more interesting answer than most articles give. Each SIM type, physical, eSIM, and iSIM, has a different architecture and a different attack surface. Here is how they actually work and which is genuinely more secure.
CIAM
Auth0 vs ForgeRock: Enterprise Identity Compared (2026)
Auth0 (Okta) versus ForgeRock (Ping Identity), compared on developer experience, CIAM versus workforce IAM, deployment models, extensibility, standards, and pricing.
Cybersecurity
How to Prevent a Data Breach: A Practical Playbook
Most data breaches don't come from sophisticated zero-day attacks. They come from stolen credentials, misconfigurations, and unpatched systems. Here is a practical, prioritized playbook for preventing the breaches that actually happen.
Password Hashing
bcrypt vs Argon2 vs scrypt vs PBKDF2: A 2026 Decision Framework
Most "use bcrypt" posts are from 2014. Argon2 won the Password Hashing Competition in 2015 and nobody updated. Here is the actual 2026 decision framework for picking a password hashing algorithm.
Identity
Authentication vs Authorization: A 2026 Founder's Guide
A founder's guide to the difference between authentication and authorization in 2026, with passkeys, agent auth, JWT pitfalls, and the mistakes I see at scale.
authentication
Why We Cancelled Auth0 at 350,000 MAU (And How MojoAuth Saved Us $200K Annually)
We cancelled Auth0 over a year ago. Not because it stopped working, but because scaling to 350,000 monthly active users made the pricing model untenable.
CIAM
The Future of CIAM: Why Legacy Identity Systems Are Dead (And What Replaces Them)
The CIAM platform that got you to 1 million users won't get you to 10 million AI agents.
authentication
Silent Network Authentication: The Invisible Layer Replacing SMS OTP in 2026
Silent Network Authentication verifies users in 1-4 seconds using SIM cryptography without any user action.
passwordless
Passwordless Authentication in 2026: 5 Methods Compared and How to Roll It Out
Passwords are responsible for 80% of data breaches. Passwordless authentication eliminates the attack surface entirely.
cybersecurity
Zero-Knowledge Proofs: How to Prove You Know a Secret Without Revealing the Secret
The most powerful cryptographic primitive you've never heard of. Zero-knowledge proofs prove you know something without revealing what you know, and
authentication
Passkeys Hit Critical Mass: Microsoft Auto-Enables for Millions, 87% of Companies Deploy as Passwords Near End-of-Life
March 2026 marks passwordless tipping point: Microsoft forces passkey migration, regulatory deadlines hit, and adoption surges to 69% of consumers.
passwordless
Top 5 Passwordless Authentication Solutions in 2026: Enterprise and SaaS Comparison
Not all passwordless solutions are built the same. Some excel at enterprise compliance; others at developer speed or consumer UX.
cybersecurity
AI-Powered Adaptive Authentication and Behavioral Biometrics: The Enterprise Guide 2026
60% of phishing breaches now bypass traditional MFA. Learn how AI-powered adaptive authentication and behavioral biometrics create continuous security
passkeys
Passkeys at Scale: The Complete Enterprise Deployment Playbook 2026
87% of enterprises are deploying passkeys. This complete playbook covers architecture decisions, enrollment UX, recovery design, and the deployment
authentication
The Complete Guide to Authentication Implementation for Modern Applications
A comprehensive developer guide to implementing secure authentication in modern applications. Covers OAuth 2.
CIAM
CIAM Industry Research Report: M&A and Investment Analysis
A Comprehensive Guide for Investment Bankers, Private Equity, and Venture Capital Professionals
authentication
Top Authentication Methods for Preventing Data Breaches
Authentication determines who gets in and who stays out. Getting this right means fewer breaches, less downtime, and stronger trust with customers.
hashing
The Complete Guide to Password Hashing: Argon2 vs Bcrypt vs Scrypt vs PBKDF2 (2026)
Comprehensive guide comparing password hashing algorithms - Argon2, Bcrypt, Scrypt, and PBKDF2.
AI (Artificial Intelligence)
Client ID Metadata Documents (CIMD): The Future of MCP Authentication
Struggling with MCP authentication? The November 2025 spec just changed everything. CIMD replaces DCR's complexity with a simple URL-based approach, no
MCP
MCP
The Complete Guide to Model Context Protocol (MCP): Enterprise Adoption, Market Trends, and Implementation Strategies
One year after launch, MCP has become the universal standard for connecting AI agents to enterprise tools, with 97M+ monthly SDK downloads and backing
IAM
IAM
Top 10 Alternatives To Delinea PAM
Looking for Delinea PAM alternatives? Discover 10 powerful privileged access management solutions offering advanced security features, seamless
CIAM
CIAM
Top 6 Alternatives to Google Firebase Customer Identity
Explore the top 6 alternatives to Firebase Authentication, from MojoAuth’s passwordless login to Okta’s enterprise IAM, and find a secure, scalable CIAM
CIAM
CIAM
Top 5 Alternatives To AWS Cognito Customer Identity
Looking for AWS Cognito alternatives? Compare MojoAuth, Auth0, Okta, FusionAuth, and Keycloak for secure, scalable, and flexible customer identity
CIAM
CIAM
Top 5 Alternatives To Auth0 Customer Identity
Looking beyond Auth0? Compare FusionAuth, Keycloak, Cognito, Firebase, and MojoAuth for SSO, MFA, passkeys, and social logins, plus pricing,
CIAM
The Twilio-Stytch Acquisition: A Watershed Moment for Developer-First CIAM
Twilio acquiring Stytch signals a major shift in developer CIAM. I've analyzed 20+ platforms, from Descope to Keyclock, to show you which deliver on
solutions
solutions
Top 10 Alternatives To RSA SecurID
Explore 10 top alternatives to RSA SecurID, featuring MFA, SSO, and risk-based authentication solutions.
authentication
The Psychology of Security: Why Users Resist Better Authentication
70% of Americans feel overwhelmed by passwords, yet only half choose secure ones despite knowing the risks.
digital identity
digital identity
The Top 5 Credential Management Solutions of 2025
Discover the top 5 credential management solutions of 2025. From Entrust's PKI expertise to Okta's extensive integrations, find the perfect platform to
authentication
The Complete Guide to Google One Tap Login: Everything Developers Need to Know
🚀 Developers: Boost user signups by 90% with Google One Tap Login! This complete 2025 guide covers implementation, security considerations, and 5
digital identity
Auth Migration Hell: Why Your Next Identity Project Might Keep You Up at Night
Authentication migrations fail 40% of the time, costing millions in downtime. Learn the strategies security leaders use to avoid disaster, choose the
CIAM
Comprehensive CIAM Providers Directory: Top Identity Authentication Solutions
Choosing the right authentication provider? A comprehensive directory covers 30+ top CIAM solutions from enterprise leaders like Auth0 to innovative
AI (Artificial Intelligence)
Identity's New Frontier: AI, Machines, and the Future of Digital Trust
The identity industry faces its biggest shift yet: machines now outnumber humans 90:1 in digital systems.
API
Unlocking the Gates: REST API Authentication Methods for Modern Security
From Basic Auth’s simplicity to OAuth 2.0’s delegated muscle, this quick-read unpacks the strengths, gaps, and best-fit use cases of the four core REST
IAM
Beyond Auth0: A Comprehensive Guide to Authentication Alternatives in 2025
Struggling with Auth0's pricing or technical limitations? This comprehensive guide analyzes the top commercial and open-source authentication alternatives
authentication
Harnessing AI to Create Auth and Register Pages: A Step-Wise Guide to Enhance UX
86% of users abandon websites due to poor authentication experiences. Discover how AI can transform your login and registration pages into conversion
cybersecurity
RSAC 2025: The Unprecedented Evolution of Cybersecurity
At RSAC 2025, the cybersecurity landscape underwent a seismic shift. This analysis reveals how autonomous AI agents, deepfake technologies, and quantum
authentication
Best Practices for User Authentication and Authorization in Web Applications: A Comprehensive Security Framework
In a world where credential breaches cost companies millions, strong authentication isn't optional, it's essential.
authentication
The Ultimate Guide to Authentication Page Implementation: Balancing Security, Privacy, and Search Experience in the AI Era
Authentication pages serve as both security checkpoints and critical SEO touchpoints. While 80% of data breaches involve compromised credentials, properly
enterprise
The Enterprise-Ready Dilemma: Navigating Authentication Challenges in B2B SaaS
Authentication issues block 75% of enterprise SaaS deals, with companies losing millions in revenue annually.
hashing
The Science of Password Protection: Understanding Hashing, Salting, and the Future of Authentication
Uncover the mechanics of password hashing and salting, and how these techniques are pivotal in defending against cyber threats.
CIAM
CIAM Basics: A Comprehensive Guide to Customer Identity and Access Management in 2025
CIAM has evolved from a security tool into a business advantage. This comprehensive guide explores how CIAM solutions balance robust security with
jwt
Understanding JWT: From Basics to Advanced Security
Discover how JSON Web Tokens (JWT) revolutionize web authentication. This guide covers everything from basic concepts to advanced security measures,
authentication
All About Authentication and Authorization Tokens: A Comprehensive Guide
Understand different token types, from bearer tokens to PATs, along with their implementation strategies and security considerations.
authentication
The Future of AI Agent Authentication: Ensuring Security and Privacy in Autonomous Systems
AI agents need to prove both their own identity and that a human authorized the action. Here is the three-token delegation architecture that answers both, and the security layers around it.
authentication
Authentication and Single Sign-On: Essential Technical Foundations
Dive deep into the technical fundamentals of Authentication and SSO systems. Learn how HTTP, security protocols, and best practices work together to
SAML
SAML (Security Assertion Markup Language): A Comprehensive Guide
Dive into the world of Security Assertion Markup Language (SAML), from its core concepts to practical implementation.
FIDO
Implementing FIDO2 Authentication: A Developer's Step-by-Step Guide
Discover the essentials of FIDO2 authentication implementation in this developer-focused guide.
passwordless
Busting Common Passwordless Authentication Myths: A Technical Analysis
Explore the technical realities of passwordless authentication in this comprehensive analysis.
digital identity
Beyond Passwords: AI's Role in the Future of Authentication
Tired of passwords? AI is ushering in a new era of authentication! This post delves into cutting-edge technologies like behavioral biometrics, risk-based
SAML
OIDC vs SAML: A Comprehensive Technical Comparison
Dive into the identity and access management world with a technical comparison of OpenID Connect (OIDC) and Security Assertion Markup Language (SAML).
authentication
The Unseen Powerhouse: Demystifying Authentication Infrastructure for Tech Leaders
Authentication: The digital gatekeeper. Explore the hidden infrastructure and cutting-edge security keeping your data safe online.
AI (Artificial Intelligence)
The AI Revolution in Access Management: Intelligent Provisioning and Fraud Prevention
AI revolutionizes access management by enabling intelligent provisioning, dynamic access control, and fraud prevention.
AI (Artificial Intelligence)
The Next Evolution of IAM: How Generative AI is Transforming Identity and Access
The shift towards AI-powered IAM promises to enhance security, improve user experiences, and simplify complex access management tasks.
digital identity
Demystifying JWT, OAuth, OIDC, and SAML: A Technical Guide
Dive into a clear technical guide explaining JWT, OAuth, OIDC, and SAML. Learn their strengths and weaknesses and use cases to choose the right approach
authentication
Securing the Frontier: Preventing Account Takeovers with AI
Machines against machines, AI promises the future’s most decisive counterpunch against surging account takeover threats.
authentication
Ditch the Passwords: Discover the Magic of WebAuthn and Passkeys
Discover the future of secure and innovative authentication with WebAuthn. Say goodbye to passwords and hello to passwordless auth and passkeys.
digital identity
Securing Human Identities in the Digital Age
In the fast-paced world of the internet, where every click, every search, and every interaction leaves a digital footprint, the security of human
authentication
Breaking Barriers: How Out-of-Band Authentication Enhances Security
Secure your online accounts with out-of-band authentication. Learn more about cyber security and how it can protect your information.
authentication
Authentication Systems Decoded: The Science Behind Securing Your Digital Identity
Cybersecurity is a continuous journey, but with solid authentication systems, this trip can be safer for everyone on board.
Web Security
Web Session Tokens: Your Insurance Policy against Cyber Threats
Don't leave your website's security to chance! Insure it against cyber threats with web session tokens, the ultimate insurance policy for your online
digital identity
What is OAuth 2.0?
OAuth 2 allows users to grant third-party applications access to their accounts without sharing their passwords.
authentication
The Developer’s Guide to Mobile Authentication
Looking for a comprehensive guide to mobile authentication? Look no further than our Developer's Guide!
SSO
The Gateway to a Streamlined Digital World: Your Single Sign-On Masterclass
Discover how Single Sign-On (SSO) is revolutionizing digital identity management. Learn about the benefits of SSO and how it is changing the game for
authentication
Effortless Sign-up with Lazy Registration
Registration forms are like a bad dream that never ends. But with lazy registration, it's like waking up to a beautiful day without a care in the world.
CIAM
5 Areas Where CIAM Is More Than An IT Responsibility
CIAM becomes prominent and requires cross-functional collaboration and deliberate decision-making
authentication
Built-in Authentication Security Mechanisms to Reinforce Platform Security
By incorporating built-in platform authentication mechanisms, including MFA and adaptive authentication, you can build the trust of your customers by
API
5 Common RESTful API Security Risks and How to Protect Against Them
RESTful APIs are still vulnerable to various security risks. In this article, we will explore five common RESTful API security risks and discuss how to
privacy
Are Verifiable Credentials Paving the Way for Reinforced Digital Privacy?
Verifiable credentials ensure individuals have total control over their personal information and need to verify their data instead of providing it.
authentication
Authentication, Identity Verification, and Identification: What's the Difference
Authentication, identity verification, and identification answer three different security questions. Confusing them is how products end up with weak controls.
authentication
What is Out of Band Authentication?
Out-of-band authentication adds a second communication channel to verify the user. Here is how it works and where it earns its keep.
CIAM
5 Signs Your Traditional IAM System Needs a CIAM Makeover
Traditional IAM was built for employees, not customers. Here are five signs your IAM cannot do the CIAM job and what to fix.
digital identity
Why B2B Companies Should Implement Identity Management
Most B2B SaaS companies bolt on identity as an afterthought. After scaling a CIAM platform to 1B+ users, I learned that getting identity right from the
social media
SSO vs. Social Login: What’s the Difference? [Infographic]
Single sign-on and social login both reduce password friction, but they solve different problems. Here is when to use each.
authentication
Cross-Device Authentication and Tracking: The Opportunities and Underlying Privacy Risks
Cross-device authentication promises one identity across phones, laptops, and TVs. The privacy trade-offs deserve a hard look.
authentication
M2M Authorization: Authenticate Apps, APIs, and Web Services
OAuth 2.0 client credentials grant explained: how services authenticate to each other, request scoped tokens, and call APIs without a user in the loop.
authentication
Will Decentralized Auth Change the Perception of Consumer Identities in 2022?
Whether we talk about inappropriate data collection or a loophole in managing consumer identities, anything could lead to compromised sensitive
blockchain
Decentralized identity using blockchain
Decentralized identity is becoming a reality for users of blockchain-based applications, and it’s thanks to the proliferation of unique, verifiable identifiers.
MFA
How to Use Multi-Factor Authentication When You Don’t Have Cell Phone Access
To verify the identity of clients, many security-minded organisations use multi-factor authentication.
authentication
Credential Stuffing: How To Detect And Prevent It (Updated)
Credential stuffing exploits password reuse at industrial scale. Here is how it works and the layered defences that actually stop it.
authentication
What is lazy registration and how it is solving the problem of early registration
Many users switch websites when they are bombarded with lengthy registration forms too early. The solution to this is lazy registration
infrastructure
How Poor Login Concurrency can Impact OTT Platforms' Business
Account sharing on streaming platforms is now a revenue and security problem. Concurrent-session limits are a key part of the answer.
authentication
Cookie-based vs. Cookieless Authentication: What’s the Future?
Cookies vs. JWTs for authentication: how each works, where each fits, and why most modern systems run both side by side across web, mobile, and API surfaces.
MFA
How to Set Up Two-factor Authentication on All Your Online Accounts
A practical guide to turning on two-factor authentication across the accounts that matter, with the right method for each.
digital identity
The Different Ways Artificial Intelligence Solves Real-World Digital Identity Challenges
Forward-looking businesses are using artificial intelligence to solve real-world digital identity challenges.
password
5 Tips for Choosing the Right Password Manager for Your Team
When investing in a password manager for business, always prioritize better functionality and security over fancy designs or a complicated interface.
password
Are Passwords Really Dead?
These easy login methods might be the nail in the coffin. We take a brief look at the death of passwords, and how to prepare for a passwordless future.
SSO
Federated Identity Management vs. SSO: What's The Difference?
Enterprises need to use methods to maximize the use of digital identities for multiple users.
digital identity
The Major Challenges of Customer Identification in the Retail Industry
Retail identity is uniquely hard: high volume, low margin, omnichannel, and fraud-heavy. Here are the challenges and how to address them.
SSO
SAML or OIDC: Which is Better For Your Business?
SAML and OIDC both enable single sign-on. They have different strengths and the right choice depends on the audience you serve.
digital identity
Guide to Digital Identity - Part 4 (Single Sign-on)
Follow my blog with Bloglovin [https://www.bloglovin.com/blog/21054273/?claim=rf6ng2jvpc4]When it comes to Digital Identity concepts, Authentication is
phishing
Curating a Framework To Defend Against Phishing Attacks
Many businesses are facing challenges in dealing with phishing attacks. Here’s an insightful read to defend against phishing attacks and improve your business.
authentication
What is Continuous Authentication
Continuous authentication treats trust as a stream, not a single login event. Here is how it works and where it earns its keep.
authentication
What Is Broken Authentication and How to Prevent Your Company From It
Broken authentication is one of the most common and most damaging classes of web vulnerability. Here is how it happens and how to stop it.
security
7 Common Web Application Security Threats
Most web-application breaches still come from a small set of well-known threats. Here are the seven that matter most and how to stop them.
authentication
Login Security: 7 Best Practice to Keep Your Online Accounts Secure
In reality, there are so many mistakes that can make your account vulnerable to cyber attacks.
Best Practices
Best Practices for Choosing Good Security Questions
Security problems are an alternative way to recognise your customers when they have forgotten their password, entered too many times the wrong passwords,
CIAM
Why LoginRadius Became a Leading IDaaS Provider
How I built LoginRadius into an IDaaS platform that handles hybrid environments, SSO, MFA, and compliance at scale.
authentication
Building a Secure Login Pathway for SPAs With LoginRadius
Single-page apps changed how auth works. Here is how we approached SPA security at LoginRadius and the patterns worth keeping.
authentication
Authentication and Authorization Defined: What's the Difference? [Infographic]
Authentication proves who you are. Authorization decides what you can do. Here is why mixing them up causes most access-control bugs.
digital identity
Guide to Digital Identity, Part 2 (Authentication)
In the previous article (Guide to Digital Identity-Part 1 [https://medium.com/@dip_ak/guide-to-digital-identity-part-1-4b7c8fe45ee1]), we talked about the
password
The Worst Passwords of 2019
Overall, a major challenge for corporations is poor passwords combined with smart hackers.
SSO
3 Reasons for B2C Enterprises to Implement Single Sign-on Authentication
Single sign-on authentication, or SSO, is becoming more commonplace as the digital revolution continues to evolve.
CIAM
IAM vs. CIAM: Which Solution is Right For You?
In order to serve customers, conventional identity management is no longer enough.
social media
Reconsidering Social Login from a Security and Privacy Angle
Social login still has a place, but it is no longer the front door. A practitioner's view on when to use it, how to harden it, and what is replacing it.