User Provisioning with SCIM: What Actually Works
A standard for automatically creating, updating and disabling user accounts from a customer's identity system. The key figures Standard SCIM defines a protocol...
Category · 251 articles
Websites and web products that load fast, read clearly and hold up under maintenance.
A standard for automatically creating, updating and disabling user accounts from a customer's identity system. The key figures Standard SCIM defines a protocol...
Recording who did what and when in an application, separately from technical error logs. Where most projects go wrong The usual mistakes: Audit data mixed into...
Deciding how long different types of data are kept and building deletion into the system. Why does it matter? Keeping everything forever increases breach impact...
Letting users download their own data in a usable format. At a glance Formats machine-readable formats such as JSON or CSV are expected Scope exports should cov...
Protecting data at rest and in transit with encryption, and managing the keys that make it work. What is at stake Encryption limits breach impact, but poor key...
Configuring HTTPS properly, including protocol versions, cipher choices and strict transport security. The key figures HSTS tells browsers to use HTTPS for a do...
Protecting a site against attacks that overwhelm it with traffic. Where most projects go wrong The usual mistakes: Exposed origin servers No rate limits on sear...
A filtering layer that inspects HTTP traffic and blocks requests matching known attack patterns. Why does it matter? A firewall buys time against known attacks,...
A published policy telling security researchers how to report vulnerabilities in your systems. At a glance security.txt a standard file that publishes contact d...
Commissioning security professionals to attack your application under controlled conditions. What is at stake Testing finds issues automated scanners miss, and...
A machine-readable inventory of the components and dependencies that make up a piece of software. The key figures Formats standard formats exist for describing...
Following a single request as it passes through several services, queues and databases. Where most projects go wrong The usual mistakes: Tracing only the web la...
Showing 192 of 251
The work behind this topic, and what it costs.