Guides

2. Integration and customisation

1. How to integrate your login page and auth factors
2. How to integrate a logout page
3. How to manage OAuth 2.0 scopes
4. How to configure, manage and validate access tokens
5. How to implement OpenID Connect eKYC / Identity Assurance
6. How to federate a third-party identity provider or social login
7. How to federate identities in mobile apps
8. How to enable and manage native SSO for mobile and desktop apps
9. How to implement OpenID for verifiable presentations
10. User session timeouts explained
11. How to implement account switching
12. How to configure and consume explicitly typed ID tokens and UserInfo JWTs
13. How to implement custom OAuth 2.0 grants
14. How to implement client-based sessions
15. CORS OAuth 2.0 response mode with prompt=none for SPAs
16. How to become an External Authentication Method (EAM) provider for Microsoft Entra
17. How to implement a Service Provider Interface (SPI) and package a JAR

3. OAuth 2.0 / OpenID Connect API usage

1. How to register an OAuth 2.0 client / OpenID Connect relying party
2. How to issue and use an initial access token for client registration
3. How can an OAuth 2.0 client authenticate
4. How to request OpenID claims and steer their delivery
5. Pairwise (encrypted) subject identifiers
6. How a backend service can use the OAuth 2.0 JWT grant to obtain tokens on user’s behalf
7. How to use a redirection URI template

4. Clustering

1. Load balancing and health checks
2. How to create a server cluster in AWS
3. How to debug Infinispan / JGroups
4. How to set up a dedicated node for expiration

5. Monitoring

1. How to monitor the server
2. Key login and session metrics
3. How to detect and purge disused clients

6. Development tips

1. How to setup HTTPS for localhost OAuth 2.0 web client testing and development