Secure MCP + Okta: Protect SOAR Workflows with OAuth 2.1 Security & RBAC (Part 1)

If you have been following the model context protocol closely, the running joke is: "The S in MCP stands for Security" FCTR's MCP Server for Okta delivers OAuth 2.1-protected MCP access with role-based tool filtering. The server's tools are protected by Oauth and can also be filtered by roles, so all users don't get the … Continue reading Secure MCP + Okta: Protect SOAR Workflows with OAuth 2.1 Security & RBAC (Part 1) →

Shared device authentication for consumers – device flow and Okta

The article discusses challenges and solutions for shared device authentication, focusing on consumer scenarios. It explores issues like credential exposure, session takeover, and phishing, proposing decoupled authentication and the OAuth 2.0 Device Authorization Grant as effective solutions. The Okta Customer Identity Cloud (Auth0) and Okta Workforce Identity Cloud (WIC) support this approach for secure shared device authentication.

Token protection (DPoP) with Okta

DPoP brings additional security to accessing both Okta APIs and external APIs. This article outlines the implementation steps to integrate applications with Okta using DPoP to prevent the misuse of authorization tokens.

Authenticate with PAR, an underrated gem

OAuth 2.0 is widely used in digital applications for authentication and authorization, but it has security and scalability weaknesses. Pushed Authorization Request (PAR) addresses many concerns with the conventional flow. It is beneficial for high-security scenarios like finance and healthcare, as well as in handling large or complex requests.

Secure your tokens – an introduction to DPoP

𝐏𝐫𝐨𝐨𝐟-𝐨𝐟-𝐩𝐨𝐬𝐬𝐞𝐬𝐬𝐢𝐨𝐧 capabilities are becoming pivotal in ensuring application token security with the increasing adoption of OAuth-based access management. 𝐃𝐏𝐨𝐏, or 𝐃𝐞𝐦𝐨𝐧𝐬𝐭𝐫𝐚𝐭𝐢𝐧𝐠 𝐏𝐫𝐨𝐨𝐟 𝐨𝐟 𝐏𝐨𝐬𝐬𝐞𝐬𝐬𝐢𝐨𝐧 is a relatively new standard that comes with promising security features, especially for the internet-facing open applications.

Securely verify transactions – Can CIBA lead the way?

Client-Initiated Backchannel Authentication (CIBA) is rapidly gaining traction and showing promise in delivering a secure and seamless experience during sensitive transaction verification within a digital application. Here are some notes about this interesting development and how Okta is pioneering its adoption.