With over 20 years of experience in identity and access management, Rob has successfully led complex implementation projects worldwide. Currently, Rob is focused on helping enterprise organisations leverage identity orchestration to enhance customer experiences across multiple channels without compromising on security. He is a passionate advocate for businesses aiming to strengthen their security posture through effective authentication, streamlined data sharing, and efficient consent management. As a keen thought leader and content contributor, Rob's insights are instrumental for organisations looking to thrive in an increasingly digital landscape.
Latest Posts
App-to-web session transfer: the security perspective
App-to-web session transfer: the security perspective
Exploring the security implications and enhancements of app-to-web session transfer patterns — examining OAuth risks, device binding strategies, and layered security controls for mobile-to-web SSO.
Implementing secure session transfer: a field guide using the PingOne platform
Implementing secure session transfer: a field guide using the PingOne platform
A hands-on field guide to wiring up a secure app-to-web session transfer on Android — walking through PingOne DaVinci flows, Pushed Authorization Requests, and PKCE to deliver seamless, token-validated SSO from a native mobile app to a web browser.
Hardening the handoff: a pattern for app-to-web single sign-on
Hardening the handoff: a pattern for app-to-web single sign-on
A walkthrough of a standards-based pattern for securely transferring an OAuth session from a native mobile app to a web browser using Pushed Authorization Requests (PAR).