The default authenticator in the WSO2 Identity Server is the Basic authenticator. It is a local authenticator that authenticates the end users using a connected user store and the provided user name and password. WSO2 Identity Server comes with extensibility which allows you to change the authentication logic which the…

XACML (eXtensible Access Control Markup Language) is an XML-based language for access control that has been standardized by the Technical Committee of the OASIS consortium. I assume that you are familiar with XACML. If you want a quick recap on what is XACML and how to use XACML with WSO2…

This is my third blog of a series of blogs about XACML. In the previous blogs, I discussed the basics of XACML and how to adapt the WSO2 Identity Server as an XACML engine. “A beginner’s guide to XACML” “WSO2 Identity Server as an XACML Engine” In this blog, I’m…

What is XACML? — XACML (eXtensible Access Control Markup Language) is an XML-based language for access control that has been standardized by the Technical Committee of the OASIS consortium. XACML is popular as a fine grain authorization method among the community. In my previous blog; “Beginner’s guide to XACML”, I have discussed the basics…

Today, enterprise applications seek ways of enforcing security that allows the right people to access the right resources with restrictions enforced by enterprise policies. The identity and entitlement management systems reduce the burden of enterprise architects and developers in security- related implementations. Attribute-Based Access Control (ABAC) is an access control…

Imagine that you have logged into several applications in different browsers and now you want to terminate these sessions. 🤔 How you are going to achieve this? One thing you can do is navigate to each of these applications and logout one by one. What if you miss a session…

Analyzing login statistics is very crucial when it comes to the security of systems and applications. Analytics will help you in fraud and anomaly detection so that you can possibly block the transactions, lock the user accounts or generate alerts to the responsible parties. WSO2 Identity Server has this analytics…

Logging is one of the most important aspects of a production-grade server. A properly configured logging system is vital for identifying errors, security threats, and usage patterns. All WSO2 products are shipped with log4j logging capabilities that generate administrative activities and server-side logs. Log4j Log Level The log level can be set specifically…

❔ What are “Claims” A claim is a piece of information about a particular subject. It can be anything that the subject is owned by or associated with, such as name, group, preferences, etc. Claims are also used in identity propagation which is the replication of authenticated identities, by packaging the claims into one…