Passkeys explained: how they work and how to roll them out
How passkeys work under WebAuthn, the difference between synced and device-bound passkeys, and a rollout plan that covers fallback and recovery from day one.
Blog4 posts
Identity
Sign-in, single sign-on, passkeys and recovery for the people you serve.
SAML vs OIDC: which to use for single sign-on
SAML 2.0 and OpenID Connect both deliver single sign-on, in different shapes. How each one works, when to pick which, and what it takes to run both side by side.
Account recovery without account takeover
Recovery is the weakest door into most accounts. Design rules for a recovery email that helps a locked-out person without handing an attacker a second way in.
Workforce identity vs customer identity: what differs
Employees and customers both sign in, but the users, scale, lifecycle and sign-in methods differ. Here is how the two compare and when one platform fits both.