As Engineering Systems become more complex, architects, designers and developers have to think about ways to optimize their systems for simplicity, performance and resilience. A common approach is to view engineering systems as two logical constructs the Control Plane and the Data Plane. Separating Data Plane and control plane The approach of separating the control plane…

In my previous blog, I went through the the basic difference between SQL vs. NoSQL vs. NewSQL. As promised, in this blog I will explore more about NoSQL along with the comparison of NoSQL Database types. NoSQL stands for Not only SQL. NoSQL Databases are also known as non-relational databases…

Adapting to the changing requirements, database management systems pursues to evolve. In this blog, I will show you the prominent difference between SQL vs. NoSQL vs. NewSQL. Sometimes back NoSQL was solution to the limitations initiate by the relational database management systems. NoSQL was originally designed to provide fast scalability…

Last year I did an analysis on the draft specification of the JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens. In this month, the RFC for the specification(rfc9068) is officially released. Therefore let me share some interesting facts that I have identified, based on the authorization servers perspective…

Just in time provisioning (JIT) is provisioning users to the Identity Server when user tries to log into an application through federated IDP such as Google, Facebook, GitHub, etc. Before look into JIT provisioning, let’s get a brief idea about provisioning types available in the WSO2 Identity Server provisioning framework. …

Through this article, I’m going to take a deep dive into time based one time password which is commonly known as TOTP. First thing first. Let’s start with the basics What is two factor authentication? The following factors are the three commonly accepted authentication factors, used to prove your identity when logging into a service. …

Nowadays all almost all of us have a Facebook account. So if we can log in to an application with our Facebook credentials other than using separate user IDs and passwords, it will make our life easier. WSO2 identity server has the capability to allow users to log into the…

Through this blog, I’m going to guide you on how to write a custom federated authenticator for the WSO2 Identity Server to authenticate a user with an external system. So the external system can be any Identity provider such as Facebook, Twitter, Google and Yahoo. In this blog, I’m using…

Nowadays data privacy has gained a massive attention and crucial value which results to have many data regulations for users to take the ownership of their own data to control how businesses utilizing those data. Therefor to accommodate this increased user awareness, businesses needs to provide significant transparency towards collecting…