Questions tagged [identity]
The identity tag has no summary.
52 questions
0
votes
0
answers
95
views
Utilising Social Logins via OAuth2 in native mobile apps
This question has been asked over and over again, but I have not yet found a satisfying answer:
How to use Social Logins (via OAuth2) to obtain access tokens for your backend if your only clients are ...
- 9
0
votes
0
answers
119
views
Avoiding conflicts with Microsoft Two-factor authentication across multiple web applications help
I'm designing a web application and using Microsoft's out of the box Identity and its default Two-Factor Authentication (with Asp.net core MVC and .NET 8). While setting up and testing the 2FA ...
- 147
0
votes
6
answers
397
views
is employee just a user in domain driven design
Suppose I have an application where I can manage clients (just companies I offer my services to) and what services I offer for them. I also have the functionality to create timebookings, which means I ...
- 140
2
votes
1
answer
92
views
Azure Managed Identity and Zero Trust
Azure Managed Identity provides a mean to only allow explicitly defined users/apps to access a given resource. For instance I can setup that no-one can access my database except the Managed Identities ...
1
vote
1
answer
87
views
Persistant Browser Display Settings for Users
I have a question about what's the best approach to handle persistent data for web apps.
I have a web app that is authenticating through an auth service. once authenticated it makes requests to the ...
- 13
1
vote
0
answers
213
views
OpenID Connect and User Management Best Practices
Currently my company has 2 applications that use Identity Server for SSO. Not every client we have uses both applications but some do. The part I'm uneasy about is that both apps have a user ...
- 146
0
votes
2
answers
2k
views
Obtaining application generated ID from repository or from entity constructor?
In the Book "Implementing Domain-Driven Design" the author suggests to implement a repository method to provide the next application-generated (not database-generated) ID. Like so:
class ...
- 886
6
votes
1
answer
2k
views
Should user and service-to-service authentications be separate?
Say I have a system with 5 microservices behind a gateway, and a user signs in through an IDP (OAuth)
A user U passes the access token in a request, and the call first reaches the gateway before it ...
- 171
0
votes
2
answers
348
views
Extend the ApplicationUser class or use a Person class?
I am making a web system using Asp.Net Core with individual user accounts (Identity), and I was thinking about how I should store the users' personal information in the database.
The system will have ...
- 131
1
vote
0
answers
48
views
Two step provisioning using OIDC and AD?
A client requested that we implement the following authentication/authorisation flow:
User authenticates using OIDC via a IAM (Salesforce in this case).
If user is an external user, then a flag is ...
- 33
2
votes
1
answer
161
views
How to randomly allocate a set of IDs digitally, one ID per person, such that everyone knows that the particular allocations are kept private?
I have a set of UUIDs that I want to assign to a set of people. I want to deliver these UUIDs to people in a secure manner, such that everyone knows that I do not know which UUID corresponds to which ...
- 31
1
vote
2
answers
2k
views
Composite Id based on another Aggregate root?
An Aggregate Root should always have a unique ID within the bounded context. Typically the examples one finds use a GUID for this to ensure global uniqueness.
However consider a bounded context for a ...
- 59
-3
votes
1
answer
2k
views
Where to save user information with an IAM like Keycloak
What is the best practice to save user informations like firstname,lastname, address...? Directly in the Keycloak db or in the application database and the identifier from the keycloak user will also ...
- 13
1
vote
1
answer
181
views
Checking validity of users and tenants in each request
I am designing a centralized IDP to use for a database-per-tenant application that uses a "tid" (Tenant Id) claim in the access token that the WebAPI uses to create a connection string ...
- 113
-1
votes
1
answer
455
views
Is there a naming convention for variables that hold one of several possible ids?
Sorry if this is a silly question, but I am not a native english speaker and a lot of times it is difficult for me to come up with meaningful variable names.
I have a table of users in our app. All ...
- 115