For AI agents: The complete documentation index is available at /docs/llms.txt. A markdown version of this page is available at /articles/ai.md.
/Articles
Resources
  • Docs
  • Articles
  • Blog
  • Release Notes
  • Install
Log InGet a demo
Resources
  • Docs
  • Articles
  • Blog
  • Release Notes
  • Install

AI

EditMD
Edit on GitHubView Markdown
AIAI

AI Authentication and Authorization

This article covers three common AI use cases: RAG, MCP and agentic systems. It also discusses how authentication and authorization interact with these use cases.

Authenticating AI Agents: The New Authentication Paradigm

Learn how to secure your applications as AI agents become first-class actors alongside humans in your systems.

How to Make Your Developer Documentation Work for Agents: Lessons from the Trenches

How to prepare your developer docs for agents.

Securing AI Agents

Agent security isn't one thing; it's a layered defense. Especially when agents are calling APIs or other networked services. Discover the layers of the secure agent stack in this article.

The Authentication Rabbit Hole: What I Learned From Vibe-Coding Auth with AI

AI can write code, but can it secure it? We explore the hidden dangers of AI-generated authentication—from weak password policies to missing CSRF protection—and why purpose-built solutions like FusionAuth remain essential for production apps.

Understanding Model Context Protocol: Connecting Your Software To AI

Learn how the Model Context Protocol (MCP) standardizes AI agent-to-software communication and why OAuth-based authentication is essential for secure, scalable implementations.

Authentication
OverviewAvoiding Authentication System Lock-InCombining SSO and MFA in FusionAuthCommon Authentication Implementation Risks And How To Mitigate ThemFedCM: A New Proposed Identity Standard That Could Change How We Log In on the WebHow Does SSO Work? Single Sign-On ExplainedHow FusionAuth Simplifies Compliance with MFA RequirementsPasswordless SSO: Secure and Seamless AuthenticationSecuring Your User Experience with MFAThe Developer Benefits of Single Sign-OnThe Security Implications Of Passwordless AuthenticationTypes Of Kubernetes AuthWebAuthn ExplainedWhat Is Multi-Factor Authentication (MFA)?What is Passwordless Authentication and How Does It Work?What Is WebAuthn and How Does It Work?Why Login Failures MatterWhy Passwordless Authentication Matters in the Age of WebAuthn
CIAM
OverviewAuth Bottleneck Architecture - Streamline Authentication Across ApplicationsAuth Facade Pattern - Simplifying Identity Management Across EnvironmentsChallenges of CIAM - Navigating Security, Usability, and ComplianceCIAM vs. IAM - Customer Identity vs. Identity Access Management ExplainedGDPR Developer's Guide to Achieving Compliance with Your CIAMOptimizing Sign-Up Flows with CIAM: Reduce Friction, Drive GrowthScaling Your Auth - Best Practices for Performance and SecurityWhat is Customer Identity and Access Management (CIAM)? CIAM ExplainedWhy CIAM is the Key to Surviving the Demise of Third-Party Cookies
Identity Basics
OverviewBest Practices For Registration FormsHow Complete Does Your Authentication Provider Need To Be?Is Passwordless Authentication Ready for Regulatory Compliance?Magic Links - A Guide to Passwordless AuthenticationMulti-Tenant vs. Single-Tenant IDaaS SolutionsOpen Source vs. Commercial Auth ProvidersOptimizing Authorization Security: A Guide to Access Control ModelsPerforming Due Diligence On Authentication VendorsSlow Migration of User DataThe Value of Trying Your Auth Provider Before You CommitUser-Centric Security - How Passkeys Improve User ExperienceWhat Is Identity Proofing? - Identity Verification ExplainedWhat Is OpenID Connect (OIDC) and How It WorksWhat Is SCIM, The System For Cross-Domain Identity Management?What To Do When Your Auth System Vendor Gets AcquiredWhy Outsource Your Auth System And How To Sell The Decision To Your Company
Login & Auth Workflows
Overview
Web Apps
OverviewWebApp Native Login To Backend With JWTs And Refresh TokensWebApp Native Login To Backend With SessionsWebApp Native Login To Backend With Sessions And Refresh TokensWebApp OAuth Login Using Authorization Code Grant With JWTs And Refresh Tokens - RecommendedWebApp OAuth Login Using Authorization Code Grant With Sessions - RecommendedWebApp OAuth Login Using Authorization Code Grant With Sessions And Refresh TokensWebApp OAuth Login Using Resource Owner Password Credentials Grant With JWTs And Refresh TokensWebApp OAuth Login Using Resource Owner Password Credentials Grant With SessionsWebApp OAuth Login Using Resource Owner Password Credentials Grant With Sessions And Refresh Tokens
Mobile
OverviewMobile Login To Backend With JWTs And Refresh TokensMobile Login To FusionAuth With JWTs And Refresh Tokens - RecommendedMobile OAuth Login Using Resource Owner Password Credentials Grant With JWTs And Refresh Tokens
Single-Page Apps
OverviewSingle-Page Application Native Login To Backend With JWTs And Refresh TokensSingle-Page Application Native Login To Backend With SessionsSingle-Page Application Native Login To Backend With Sessions And Refresh TokensSingle-Page Application Native Login To FusionAuth (Same Domain) With JWTs And Refresh TokensSingle-Page Application Native Login To FusionAuth With JWTs And Refresh TokensSingle-Page Application Native Login To FusionAuth With JWTs And Refresh Tokens In Local StorageSingle-Page Application OAuth Login Using Authorization Code Grant With JWTs And Refresh Tokens - RecommendedSingle-Page Application OAuth Login Using Authorization Code Grant With Sessions - RecommendedSingle-Page Application OAuth Login Using Authorization Code Grant With Sessions And Refresh TokensSingle-Page Application OAuth Login Using Implicit Grant With JWTs In CookiesSingle-Page Application OAuth Login Using Implicit Grant With JWTs In Local StorageSingle-Page Application OAuth Login Using Implicit Grant With SessionSingle-Page Application OAuth Login Using Resource Owner Password Credentials Grant With JWTs And Refresh TokensSingle-Page Application OAuth Login Using Resource Owner Password Credentials Grant With SessionsSingle-Page Application OAuth Login Using Resource Owner Password Credentials Grant With Sessions And Refresh Tokens
OAuth
OverviewIs OAuth for Authentication or Authorization?OAuth 2.1: Key Updates and Differences from OAuth 2.0OAuth Device AuthorizationOAuth V1 Signed RequestsSAML vs. OAuth - Understand Differences and BenefitsStoring OAuth TokensThe Complete List of OAuth GrantsThe Value of Standards-Compliant AuthenticationWhat is OAuth and How Does it Work?
Security
Overview10 Steps To Secure Your Authentication SystemAuth Providers And The Zero Trust ArchitectureExploring The Roles Of The Blue Team, The Red Team, And The Purple Team In CybersecurityGuide To User Data SecurityHow SSO Makes for A More Personalized User ExperienceHow to Implement Time Based One Time Passwords in FusionAuthIntegrating Third-Party Services with FusionAuth for Seamless Identity ManagementPassword Security Compliance ChecklistThe Math of Password Hashing Algorithms And EntropyUse FusionAuth to Detect Breached Passwords
Gaming & Entertainment
OverviewCross-Platform Gaming Accounts: Why And How?Handling Spiky Game Traffic: Registration & Autoscaling Best Practices During LaunchHow The OAuth Device Authorization Grant Can Make Your Users' Lives EasierIdentity Verification Solutions for Online GamingSecuring Gaming User Accounts With Fraud Detection And Suspicious Activity NotificationThe Benefits of Self-Hosting Critical Infrastructure to Reduce Latency in Gaming
Tokens
OverviewBuilding A Secure Signed JWTComponents of JWTs ExplainedHow to Manage JWT Expiration and Revoke JWTsPros And Cons of JWTsTokens At The Microservices Context Boundary
AI
OverviewAI Authentication and AuthorizationAuthenticating AI Agents: The New Authentication ParadigmHow to Make Your Developer Documentation Work for Agents: Lessons from the TrenchesSecuring AI AgentsThe Authentication Rabbit Hole: What I Learned From Vibe-Coding Auth with AIUnderstanding Model Context Protocol: Connecting Your Software To AI
FusionAuth

Get Started

  • download locally
  • FusionAuth Cloud
  • quickstarts

product

  • features
  • pricing

developers

  • SDKs
  • API Docs
  • Documentation
  • release notes
  • trust center

resources

  • support forum
  • FusionAuth Cloud status
  • blog
  • articles
FusionAuth GithubFusionAuth TwitterFusionAuth LinkedInFusionAuth YoutubeFusionAuth Dev.to
© 2026 FusionAuth. All Rights Reserved.License•License FAQ•Privacy•Product Privacy Policy•Cookie Policy