Whilst the SPA paradigm has grown in prominence over the years, little has changed in the guidance provided for integrating Customer Identity. With the necessity to provide a compelling UX, whilst protecting from attacks like XSS, this article introduces the ACME pattern and how it has been designed to tackle the challenge.

Microservice architectures, interconnected applications, and even AI — all enabled by APIs — mean secure access has become an increasingly complex challenge. See how Vibe coding with Copilot, NextAuth.js and Keycloak can help implement a solution using OAuth 2.0 that's able to meet the challenge.

Integrating Keycloak into a SaaS application provides a robust, cost-effective CIAM solution for managing user Authentication and Authorization. In this article, I'll show you how to easily set up a Keycloak instance to provide a best-practice CIAM implementation that will help ensure your application is safe from unauthorised access.

Account linking isn't just a technical feature, it's a strategic capability you'll almost certainly want to employ. The ability to recognize and unify customer identities not only offers a competitive advantage, but in an SSO context is a necessity to unlocking the full potential of the user experience, data integrity, personalization, security, and compliance.

CIAM architecture includes several core components all working together to deliver a seamless and secure experience for users. By adopting best practices in security, privacy, and user experience, …

Developers frequently inquire about integrating CIAM Authentication via a standard like OIDC. Using Authorization Code Flow as the recommended best practice, this article explores using Vibe coding with Copilot AI to addresses the practical steps required in a Next.js application, leveraging NextAuth.js and Keycloak as part of the solution design.

Password authentication remains a cornerstone of Customer Identity and Access Management (CIAM) systems, but to be effective, it must be done securely. Passwords should never be stored in plain text, proper encryption, hashing and salting techniques must be employed to protect them, regular monitoring to ensure safety, and periodic auditing is essential to keeping stored password data secure.

Customer Identity and Access Management (a.k.a CIAM) provides the tools, processes, policies and design patterns to manage and secure customer identities and control access to applications, service…