As browsers move to limit third-party cookies and tracking, conventional federated identity flows which require third-party cookies can cause privacy and compatibility issues. FedCM (Federated Credential Management) addresses this by letting the browser mediate the communication between the Identity Provider (IdP) and the Relying Party (RP) so that federated sign-in can be performed without third-party cookies.

Continue Reading

Every time a user clicks “Sign in with Google” or gets SSO access to a third-party app from a corporate IdP, identity crosses a trust boundary. Identity proofing happened somewhere, authentication happened somewhere else, and now another system needs to rely on that result.

Continue Reading