#access management
Human and Agentic Identity: Governing the Relationship Between People and AI Agents
Human and agentic identities share IAM foundations, but differences in autonomy, delegation, and credential management require distinct governance controls.
Centralizing MCP Authorization with PingAuthorize - Part 1
Centralizing MCP Authorization with PingAuthorize - Part 1
How to centralize dynamic authorization for MCP servers exposed by Azure APIM with PingAuthorize.
Token Exchange with Delegation in the Agentic Era
Token Exchange with Delegation in the Agentic Era
A primer on OAuth Token Exchange and delegation, exploring the concepts through real-world examples and applying them to both traditional and agentic systems.
Securing agentic workflows with token exchange and workload identity
Securing agentic workflows with token exchange and workload identity
How to preserve user context and workload accountability across apps, agents, and MCP servers using OAuth token exchange, SPIFFE/SPIRE, and PingFederate.
Securing ChatGPT apps with OAuth 2.0 and CIBA
Securing ChatGPT apps with OAuth 2.0 and CIBA
How to secure a ChatGPT app with Ping Identity, OAuth, PingOne Authorize, OAuth Token Exchange, and CIBA.
Securing the PingOne DaVinci Widget with the Backend-for-Frontend (BFF) Pattern
Securing the PingOne DaVinci Widget with the Backend-for-Frontend (BFF) Pattern
A walkthrough of how to embed the DaVinci widget in an SPA while keeping OAuth tokens and DaVinci API credentials safely on a Node.js BFF backend.
App-to-web session transfer: the security perspective
App-to-web session transfer: the security perspective
Exploring the security implications and enhancements of app-to-web session transfer patterns — examining OAuth risks, device binding strategies, and layered security controls for mobile-to-web SSO.
Hardening the handoff: a pattern for app-to-web single sign-on
Hardening the handoff: a pattern for app-to-web single sign-on
A walkthrough of a standards-based pattern for securely transferring an OAuth session from a native mobile app to a web browser using Pushed Authorization Requests (PAR).
Securing MCP Servers with Ping’s MCP Gateway
Securing MCP Servers with Ping’s MCP Gateway
Building MCP servers that expose your business logic to AI agents? Discover how PingGateway can act as your security bouncer, handling OAuth validation, auditing, rate limiting, and policy enforcement without adding a single line of security code to your servers.
Ping Identity’s LTS, STS and Everything in Between: Because You Deserve Predictable Support
Ping Identity’s LTS, STS and Everything in Between: Because You Deserve Predictable Support
Learn how Ping Identity’s unified lifecycle policy uses Long Term Support and Short Term Support releases to make identity-platform upgrades more predictable.