Topics
Browse articles by topic.
- Agent Identity · 2 posts
Identity for AI agents: delegated access, accountability, access control, and the limits of agents acting with user credentials.
- MCP · 5 posts
Model Context Protocol architecture and security: STDIO and HTTP transports, OAuth 2.0 authorization for remote servers, protected resource metadata, and the stateless redesign.
- OAuth 2.0 · 13 posts
OAuth 2.0 roles and grant types, authorization server discovery, dynamic client registration, token exchange, and authorization code flow hardening with PKCE, PAR, JAR, JARM and mTLS.
- OpenID Connect · 2 posts
OpenID Connect as the identity layer on OAuth 2.0, and provider discovery through .well-known metadata.
- SAML · 5 posts
SAML 2.0 for enterprise single sign-on: assertions, protocols, bindings, metadata, IdP discovery and the Web Browser SSO Profile.