Guides

Authentication and SSO

Sessions, tokens, SAML, OIDC and the protocols enterprise buyers ask for by name.

Artificial intelligence Authentication and SSO Authorization and access control Enterprise ready MCP Security and compliance User provisioning and SCIM

4 min read

Authentication glossary

It is easy to read a specification and conclude the problem is solved.

1 January 2026

4 min read

Authentication vs. authorization

A design is a set of bets.

1 January 2026

4 min read

Authorization glossary

Compliance has a reputation for being paperwork.

1 January 2026

4 min read

Best practices for CLI authentication: A technical guide

It is easy to read a specification and conclude the problem is solved.

1 January 2026

4 min read

Decoding and solving the five most common SAML errors

It is easy to read a specification and conclude the problem is solved.

1 January 2026

4 min read

How to migrate enterprise SSO connections from Auth0 to Paycux

There is a specific moment when a deal stops being about your product.

1 January 2026

4 min read

JWT validation: how-to and best libraries to use

It is easy to read a specification and conclude the problem is solved.

1 January 2026

4 min read

Managing SAML X.509 Certificates

It is easy to read a specification and conclude the problem is solved.

1 January 2026

4 min read

OpenID Connect vs. SAML

Protocol work looks tedious from the outside and turns out to be where the interesting failures live.

1 January 2026

4 min read

SAML vs OAuth: A technical guide

The value of a standard is that two parties who have never spoken can interoperate.

1 January 2026

4 min read

SCIM vs SSO: What's the difference and how do they work together?

Protocol work looks tedious from the outside and turns out to be where the interesting failures live.

1 January 2026

4 min read

SSO best practices

The useful frame is not "is this secure" but "what does an attacker get if this one thing goes wrong, and how quickly would we know".

1 January 2026

4 min read

The complete guide to OAuth 2.0

It is easy to read a specification and conclude the problem is solved.

1 January 2026

4 min read

The developer’s guide to auth sessions

The useful frame is not "is this secure" but "what does an attacker get if this one thing goes wrong, and how quickly would we know".

1 January 2026

4 min read

The developer’s guide to SSO

It is easy to read a specification and conclude the problem is solved.

1 January 2026

4 min read

UI/UX best practices for IdP & SP-Initiated SSO

Shipping is the easy half.

1 January 2026

4 min read

Understanding the OAuth 2.0 Client Credentials flow

The value of a standard is that two parties who have never spoken can interoperate.

1 January 2026

4 min read

What are JSON Web Tokens (JWTs)?

It is easy to read a specification and conclude the problem is solved.

1 January 2026

4 min read

What is authentication (authN)?

Almost every incident worth writing about starts with something that was working exactly as designed.

1 January 2026

4 min read

What is authorization (authZ)?

Almost every incident worth writing about starts with something that was working exactly as designed.

1 January 2026

4 min read

What is multitenant authentication?

It is easy to read a specification and conclude the problem is solved.

1 January 2026

4 min read

What is OpenID Connect (OIDC)?

Protocol work looks tedious from the outside and turns out to be where the interesting failures live.

1 January 2026

4 min read

What is password hashing?

Security work is mostly the business of removing footguns before someone finds them.

1 January 2026

4 min read

What is SAML and how does it work?

It is easy to read a specification and conclude the problem is solved.

1 January 2026

4 min read

Which authorization strategy is best for your app?

Most systems do not fail because someone chose the wrong database.

1 January 2026

Ship the thing the guide describes

Every pattern here is already implemented in the platform.

Get started Talk to an expert