#OAuth
Token Exchange with Delegation in the Agentic Era
A primer on OAuth Token Exchange and delegation, exploring the concepts through real-world examples and applying them to both traditional and agentic systems.
Securing agentic workflows with token exchange and workload identity
Securing agentic workflows with token exchange and workload identity
How to preserve user context and workload accountability across apps, agents, and MCP servers using OAuth token exchange, SPIFFE/SPIRE, and PingFederate.
Securing the PingOne DaVinci Widget with the Backend-for-Frontend (BFF) Pattern
Securing the PingOne DaVinci Widget with the Backend-for-Frontend (BFF) Pattern
A walkthrough of how to embed the DaVinci widget in an SPA while keeping OAuth tokens and DaVinci API credentials safely on a Node.js BFF backend.
App-to-web session transfer: the security perspective
App-to-web session transfer: the security perspective
Exploring the security implications and enhancements of app-to-web session transfer patterns — examining OAuth risks, device binding strategies, and layered security controls for mobile-to-web SSO.
Implementing secure session transfer: a field guide using the PingOne platform
Implementing secure session transfer: a field guide using the PingOne platform
A hands-on field guide to wiring up a secure app-to-web session transfer on Android — walking through PingOne DaVinci flows, Pushed Authorization Requests, and PKCE to deliver seamless, token-validated SSO from a native mobile app to a web browser.
Ping Orchestration SDKs 2.0
Ping Orchestration SDKs 2.0
One SDK family for DaVinci, AIC/PingAM journeys, and OIDC across web and native. Here's what changed, what it means for your apps, and how to get started.
Hardening the handoff: a pattern for app-to-web single sign-on
Hardening the handoff: a pattern for app-to-web single sign-on
A walkthrough of a standards-based pattern for securely transferring an OAuth session from a native mobile app to a web browser using Pushed Authorization Requests (PAR).
Securing MCP Servers with Ping’s MCP Gateway
Securing MCP Servers with Ping’s MCP Gateway
Building MCP servers that expose your business logic to AI agents? Discover how PingGateway can act as your security bouncer, handling OAuth validation, auditing, rate limiting, and policy enforcement without adding a single line of security code to your servers.