#OAuth
Human and Agentic Identity: Governing the Relationship Between People and AI Agents
Human and agentic identities share IAM foundations, but differences in autonomy, delegation, and credential management require distinct governance controls.
How expensive is a token exchange, really?
How expensive is a token exchange, really?
A load-test of RFC 8693 token exchange against a two-engine PingFederate cluster on Kubernetes.
Centralizing MCP Authorization with PingAuthorize - Part 1
Centralizing MCP Authorization with PingAuthorize - Part 1
How to centralize dynamic authorization for MCP servers exposed by Azure APIM with PingAuthorize.
Token Exchange with Delegation in the Agentic Era
Token Exchange with Delegation in the Agentic Era
A primer on OAuth Token Exchange and delegation, exploring the concepts through real-world examples and applying them to both traditional and agentic systems.
Securing agentic workflows with token exchange and workload identity
Securing agentic workflows with token exchange and workload identity
How to preserve user context and workload accountability across apps, agents, and MCP servers using OAuth token exchange, SPIFFE/SPIRE, and PingFederate.
Securing the PingOne DaVinci Widget with the Backend-for-Frontend (BFF) Pattern
Securing the PingOne DaVinci Widget with the Backend-for-Frontend (BFF) Pattern
A walkthrough of how to embed the DaVinci widget in an SPA while keeping OAuth tokens and DaVinci API credentials safely on a Node.js BFF backend.
App-to-web session transfer: the security perspective
App-to-web session transfer: the security perspective
Exploring the security implications and enhancements of app-to-web session transfer patterns — examining OAuth risks, device binding strategies, and layered security controls for mobile-to-web SSO.
Implementing secure session transfer: a field guide using the PingOne platform
Implementing secure session transfer: a field guide using the PingOne platform
A hands-on field guide to wiring up a secure app-to-web session transfer on Android — walking through PingOne DaVinci flows, Pushed Authorization Requests, and PKCE to deliver seamless, token-validated SSO from a native mobile app to a web browser.
Ping Orchestration SDKs 2.0
Ping Orchestration SDKs 2.0
One SDK family for DaVinci, AIC/PingAM journeys, and OIDC across web and native. Here's what changed, what it means for your apps, and how to get started.
Hardening the handoff: a pattern for app-to-web single sign-on
Hardening the handoff: a pattern for app-to-web single sign-on
A walkthrough of a standards-based pattern for securely transferring an OAuth session from a native mobile app to a web browser using Pushed Authorization Requests (PAR).