Generating self-signed certificates on Windows

If you do anything with Identity, you’ll know you need certificates — lots of them — and that normally means self-signed to keep the costs down or because you just need it for a short time before you tear down the VM or because you don’t have a PKI…

I need a SAML stack — now!

I see this question over on stackoverflow every day.

“My boss says we have to make the application SAML compliant so we can authenticate with a SAML IDP. I’m lost”

or

The mystery of the missing ADFS OAuth JWT claims

Kind of sounds like a new mystery for the five Find-Outers, a series of books (e.g. “The Mystery of the Spiteful Letters”) by End Blyton!

But it’s actually about why there are so many questions on stackoverflow and on…

Getting the scopes and audiences correct when calling an API in Azure AD B2C

Connecting Azure AD B2C to Azure AD via the B2C custom identity provider

Goodbye ADFS?

Comparing the Identity Providers (IDP’s) that I use

I’m always asked which is the best IDP to use and I’ve never found a decent comparison matrix so I just bit the bullet and made one.

Note there is no such thing as a “best” IDP. There is only a best “fit” to a use…

Validating an ADFS JWT token

I’ve been looking at integrating ADFS on Server 2016 (aka ADFS 4.0) with different kinds of applications and…

Using JavaScript in Azure AD B2C UI customisation

Connecting ADFS 5.0 and the Sustainsys SAML v2.0 for .NET Core stack