# FusionAuth Blog > News, tutorials, comparisons, and technical content from the FusionAuth team. For technical API and integration documentation, see the [FusionAuth Docs index](https://fusionauth.io/docs/llms.txt). ## Posts - [10log integrates FusionAuth into their architectural acoustics applications](https://fusionauth.io/blog/10log-fusionauth.md): 10log integrates FusionAuth running on a Digital Ocean droplet into their architectural acoustics web and desktop applications. - [Hacktoberfest 2023 with FusionAuth](https://fusionauth.io/blog/2023-hacktoberfest.md): FusionAuth joins in the Hacktoberfest event in 2023. - [Hacktoberfest 2024 with FusionAuth](https://fusionauth.io/blog/2024-hacktoberfest.md): FusionAuth joins in the Hacktoberfest event in 2024. - [We Surveyed More Than 300 Security Leaders on AI Identity. The Findings Are Counterintuitive](https://fusionauth.io/blog/2026-ai-identity-report.md): FusionAuth surveyed more than 300 technology and security leaders on AI identity security and found a striking pattern—the most confident organizations had the highest breach rates, and deployment architecture predicts outcomes better than governance maturity. - [FusionAuth Named a 2026 Best Place to Work by Built In](https://fusionauth.io/blog/2026-best-places-to-work.md): FusionAuth named a 2026 Best Place to Work by Built In in Seattle and Denver. Learn what makes our culture different and explore open roles on our team. - [The Top 6 Indications You're Doing Mocking Wrong](https://fusionauth.io/blog/6-indicators-doing-mocking-wrong.md): Overusing mocks in software testing can lead to hidden failures and technical debt. Here's how to use local-first development tools like FusionAuth Kickstart for robust, production-ready applications. - [6 Ways The FusionAuth API Is GDPR Ready](https://fusionauth.io/blog/6-ways-fusionauth-api-gdpr-ready.md): FusionAuth is ready for the GDPR in 6 important ways. - [8 Things to Know About Okta And FusionAuth](https://fusionauth.io/blog/8-things-to-know-about-okta-and-fusionauth.md): Compare FusionAuth and Okta for your identity and access management solution. - [Authentication as a Service Security Due Diligence Tips](https://fusionauth.io/blog/aaas-security-due-diligence-excerpt.md): Before you choose an Authentication as a Service (AaaS) vendor, what kind of security due diligence should you perform? - [FusionAuth vs Active Directory Customer Identity & Access Management](https://fusionauth.io/blog/active-directory-and-fusionauth-ciam-comparison.md): Compare FusionAuth and Active Directory features, pricing, and deployment options to see which fits your CIAM needs. - [How to Connect FusionAuth to Active Directory or LDAP](https://fusionauth.io/blog/active-directory-connector.md): Use FusionAuth's AD Connector to sync with LDAP or Active Directory, including AWS-hosted services. Enable seamless login and user sync. - [Why Risk-Based MFA is a Game Changer for User Experience](https://fusionauth.io/blog/adaptive-mfa-user-experience.md): Traditional MFA treats every login the same — whether it's your most loyal customer on their usual device or a credential-stuffing bot at 3am. Risk-based MFA can tell the difference. Here's how it works, and why modern implementations like Intelligent MFA take it further. - [AdCellerant seamlessly migrated their data from MongoDB to FusionAuth](https://fusionauth.io/blog/adcellerant-migrated-from-mongodb.md): Before migrating to FusionAuth, AdCellerant used a homegrown authentication solution with MongoDB. When they moved to FusionAuth, they transferred thousands of accounts transparently. - [FusionAuth Advanced Registration: Custom Multi-Step Forms](https://fusionauth.io/blog/advanced-registration-form.md): Create advanced registration forms in FusionAuth. Customize multi-step forms, add custom fields, and enhance user onboarding with validation. - [Google just solved agent identity. For Google Cloud](https://fusionauth.io/blog/agent-identity-walled-gardens.md): Google Cloud Next showed exactly where agent governance is headed — and exactly where it stops. Here's what the keynote got right, and the question nobody answered. - [The Real Problem with AI Agents Isn't Identity, It's Authorization](https://fusionauth.io/blog/ai-authorization.md): AI agents don't just need their own identities — they need fine-grained authorization, and most APIs aren't built to provide it. - [The 3 Areas of AI Authentication for Secure AI Agent Login](https://fusionauth.io/blog/ai-ready-authentication.md): Learn how AI authentication uses OAuth and other standards to manage AI agent logins securely, with built-in support for scalability and performance. - [Air-Gapping And Authentication](https://fusionauth.io/blog/air-gapping.md): Learn what air-gapping is, why organizations use it, and how authentication servers like FusionAuth can be deployed in air-gapped environments. - [Amazon Cognito and FusionAuth Comparison](https://fusionauth.io/blog/amazon-cognito-and-fusionauth-comparison.md): Compare FusionAuth and Amazon Cognito for your identity and access management solution. - [Android App End-to-End Testing With FusionAuth](https://fusionauth.io/blog/android-end-to-end-testing.md): How to end-to-end test an Android App including FusionAuth. - [Our Beta Android SDK](https://fusionauth.io/blog/android-sdk-beta.md): The FusionAuth Android SDK makes integrating with FusionAuth easier. - [AngularDenver is Next Week!](https://fusionauth.io/blog/angulardenver-fusionauth-sponsor.md): AngularDenver is Colorado's best Angular conference. Join us for all 4 days of technical goodness. - [Introducing the FusionAuth Early Access Program](https://fusionauth.io/blog/announcing-early-access-program.md): Authentication and authorization is critical application functionality. How can you stay on top of the latest features without affecting your users? - [Announcing FusionAuth 1.16](https://fusionauth.io/blog/announcing-fusionauth-1-16.md): The FusionAuth 1.16 Release allows you search provider flexibility, a smaller Docker image and more. - [Announcing FusionAuth 1.17](https://fusionauth.io/blog/announcing-fusionauth-1-17.md): The FusionAuth 1.17 Release offers Sign in with Apple, more flexibility with identity provider user reconciliation and more. - [Announcing FusionAuth 1.18](https://fusionauth.io/blog/announcing-fusionauth-1-18.md): The FusionAuth 1.18 Release offers custom registration forms, syncing with LDAP and more. - [Announcing FusionAuth 1.19](https://fusionauth.io/blog/announcing-fusionauth-1-19.md): The FusionAuth 1.19 release offers stateless, multi-tenant Single-Sign-on (SSO), more flexible configuration, and more. - [Announcing FusionAuth 1.20](https://fusionauth.io/blog/announcing-fusionauth-1-20.md): The FusionAuth 1.20 Release offers more forms, SAML improvements, docker changes and more. - [Announcing FusionAuth 1.21](https://fusionauth.io/blog/announcing-fusionauth-1-21.md): The FusionAuth 1.21 Release offers SAML improvements and PKCE support for OIDC. - [Announcing FusionAuth 1.22](https://fusionauth.io/blog/announcing-fusionauth-1-22.md): The FusionAuth 1.22 Release offers Elasticsearch improvements and asynchronous tenant deletion. - [Announcing FusionAuth 1.23](https://fusionauth.io/blog/announcing-fusionauth-1-23.md): The FusionAuth 1.23 Release offers customer support roles as well as the LinkedIn identity provider. - [Announcing FusionAuth 1.24](https://fusionauth.io/blog/announcing-fusionauth-1-24.md): The FusionAuth 1.24 Release offers UX improvements and numerous bug fixes. - [Announcing FusionAuth 1.25](https://fusionauth.io/blog/announcing-fusionauth-1-25.md): The FusionAuth 1.25 Release includes more debugging and SAMLv2 logout. - [Announcing FusionAuth 1.26](https://fusionauth.io/blog/announcing-fusionauth-1-26.md): The FusionAuth 1.26 Release includes advanced MFA, an API to manage API keys, entity management preview release and more. - [Announcing FusionAuth 1.27](https://fusionauth.io/blog/announcing-fusionauth-1-27.md): The FusionAuth 1.27 Release includes application themes, email gating, safe links fixes and more. - [Announcing FusionAuth 1.28](https://fusionauth.io/blog/announcing-fusionauth-1-28.md): The FusionAuth 1.28 release includes identity linking, additional identity providers, a lambda for the Client Credentials grant and more. - [Announcing FusionAuth 1.29](https://fusionauth.io/blog/announcing-fusionauth-1-29.md): The FusionAuth 1.29 release includes identity linking improvements, better SAML and Freemarker debugging, and more. - [Announcing FusionAuth 1.30](https://fusionauth.io/blog/announcing-fusionauth-1-30.md): The FusionAuth 1.30 releases a robust suite of Advanced Threat Detection features, a JWT vending machine, myriad webhook events, and more. - [Announcing FusionAuth 1.31](https://fusionauth.io/blog/announcing-fusionauth-1-31.md): This release includes a number of bug fixes as well as enhancements to reconcile lambda functionality. - [Announcing FusionAuth 1.32](https://fusionauth.io/blog/announcing-fusionauth-1-32.md): This release includes custom email headers, identity provider link limits, and more. - [Announcing FusionAuth 1.33](https://fusionauth.io/blog/announcing-fusionauth-1-33.md): This release includes updates in Docker architecture support, improved localization and more. - [Announcing FusionAuth 1.34](https://fusionauth.io/blog/announcing-fusionauth-1-34.md): This release includes security updates, a new password hash plugin and more. - [Announcing FusionAuth 1.35](https://fusionauth.io/blog/announcing-fusionauth-1-35.md): This release includes bug fixes, internal updates, and support for HTTP requests in FusionAuth lambdas. - [Announcing FusionAuth 1.36](https://fusionauth.io/blog/announcing-fusionauth-1-36.md): This release includes bug fixes, a new Identity Provider, and SCIM2 support. - [Announcing FusionAuth 1.37](https://fusionauth.io/blog/announcing-fusionauth-1-37.md): This release includes bug fixes, multi-factor authentication (MFA) policies for applications, an API to mark a user's email address as verified, and the ability to limit webhooks to a certain tenant. - [Announcing FusionAuth 1.38](https://fusionauth.io/blog/announcing-fusionauth-1-38.md): This release includes bug fixes and group membership webhooks. - [Announcing FusionAuth 1.39](https://fusionauth.io/blog/announcing-fusionauth-1-39.md): This release includes better support for JSON patch, SCIM, and locales, as well as bug fixes. - [Announcing FusionAuth 1.40](https://fusionauth.io/blog/announcing-fusionauth-1-40.md): This release includes native windows installation, Okta SCIM support for deactivation of users, and a change to how you can install the MySQL driver. - [Announcing FusionAuth 1.41](https://fusionauth.io/blog/announcing-fusionauth-1-41.md): These releases include passkeys support, improvements to Steam login, and IdP provisioning for the FusionAuth admin UI. - [Announcing FusionAuth 1.42](https://fusionauth.io/blog/announcing-fusionauth-1-42.md): This release includes rehashing of passwords on password change, force MFA, and allow users to unlock their account by changing their password, and more. - [Announcing FusionAuth 1.43](https://fusionauth.io/blog/announcing-fusionauth-1-43.md): This release includes the unification of SAML SP initiated and IdP initiated login configurations, enhanced support for PostgreSQL 15, options to relax SAML security measures to ease migration, and adds support for wildcards in redirect URL. - [Announcing FusionAuth 1.45](https://fusionauth.io/blog/announcing-fusionauth-1-45.md): This release includes search and pagination for ten plus FusionAuth configuration types, a FusionAuth hosted backend for easier use with SPAs, and the ability to import Drupal password hashes. - [Announcing FusionAuth 1.46](https://fusionauth.io/blog/announcing-fusionauth-1-46.md): This release improves the OIDC discovery endpoint when you have multiple tenants, enhances the Device grant, and includes a number of security fixes. - [Announcing FusionAuth 1.47](https://fusionauth.io/blog/announcing-fusionauth-1-47.md): This update includes performance improvements, the ability to include preferred languages on the basic registration form, and SAMLv2 assertion encryption. - [Announcing FusionAuth 1.48](https://fusionauth.io/blog/announcing-fusionauth-1-48.md): This update includes webhook improvements, the ability to retrieve more than 10,000 users, and exposes the access token to your lambdas. - [Announcing FusionAuth 1.49](https://fusionauth.io/blog/announcing-fusionauth-1-49.md): This update includes bug fixes, security improvements and more. - [Announcing FusionAuth 1.50 - OAuth Scopes are Here](https://fusionauth.io/blog/announcing-fusionauth-1-50.md): This update includes OAuth scopes support, a UserInfo lambda, and an easier setup screen. - [Announcing FusionAuth 1.51 - Theming Toucan](https://fusionauth.io/blog/announcing-fusionauth-1-51.md): This update includes our new visual, Simple Theme editor and a couple bug fixes. - [Announcing FusionAuth 1.52.0 - Passkeys for Everyone!](https://fusionauth.io/blog/announcing-fusionauth-1-52.md): This update brings passkeys to the free Community plan of FusionAuth, enhancing security for everyone. - [Announcing FusionAuth Version 1.53.0 - Webhook Logs and New Lambdas](https://fusionauth.io/blog/announcing-fusionauth-1-53.md): Version 1.53.0 of FusionAuth introduces two requested features. You can now see a history of webhooks and their statuses, and logins now have more logic. - [Announcing FusionAuth Version 1.54.0](https://fusionauth.io/blog/announcing-fusionauth-1-54.md): Version 1.54.0 of FusionAuth fixes an important SCIM issue. - [Announcing FusionAuth Version 1.55.1 - The Holiday Hippo](https://fusionauth.io/blog/announcing-fusionauth-1-55.md): FusionAuth v1.55.1 "The Holiday Hippo" brings major updates including SAML encryption support, enhanced API key security with via expiration, configurable lambda timeouts, and more. - [Announcing FusionAuth Version 1.56 - The SSO Snake](https://fusionauth.io/blog/announcing-fusionauth-1-56.md): FusionAuth v1.56.0 "The SSO Snake" includes changes to custom domains, API key security and SSO bootstrapping, as well as many bug fixes. - [Announcing FusionAuth 1.57.0 - The Webhook Wombat](https://fusionauth.io/blog/announcing-fusionauth-1-57.md): Whether you're processing massive numbers of webhooks or simplifying event management, version 1.57.0 improves system performance. - [Announcing FusionAuth 1.58.0 - The Delegation Dolphin](https://fusionauth.io/blog/announcing-fusionauth-1-58.md): FusionAuth 1.58.0 introduces Tenant Manager v1 and Universal Apps to transform B2B2C user management. Let customers manage their own users while you maintain security and deploy applications instantly across multiple tenants. - [Announcing FusionAuth 1.59.0 - The Identity Ibex](https://fusionauth.io/blog/announcing-fusionauth-1-59.md): FusionAuth 1.59.0 introduces phone numbers as first-class identity types and SMS passwordless authentication. Enable phone-only registration and reduce friction for mobile users. - [Announcing FusionAuth 1.60.0 - The Prompt Param Piranha](https://fusionauth.io/blog/announcing-fusionauth-1-60.md): FusionAuth 1.60.0 introduces OpenID Connect prompt parameter support, giving developers precise control over authentication flows with silent authentication, forced re-authentication, and consent management capabilities for modern applications. - [Announcing FusionAuth 1.61 - The Flexible Fox](https://fusionauth.io/blog/announcing-fusionauth-1-61.md): New in FusionAuth 1.61: Multiple Google IdPs per instance, SAML ForceAuthn support, and fixed MFA trust persistence. Adapt authentication to your exact needs. - [Announcing FusionAuth 1.62 - The Refined Reindeer](https://fusionauth.io/blog/announcing-fusionauth-1-62.md): FusionAuth 1.62.0 arrives with a polished, high-performance Admin UI. This release also features Pre-Verified Identities, smarter MFA Lambdas, and Tenant-Scoped IdPs for better scalability. - [Announcing FusionAuth 1.63 - The Proof Pangolin](https://fusionauth.io/blog/announcing-fusionauth-1-63.md): FusionAuth 1.63.0 hardens security like the keratin scales of a pangolin with DPoP and noms a whole bunch of bugs. - [Announcing FusionAuth 1.64 - The Secret Shibe](https://fusionauth.io/blog/announcing-fusionauth-1-64.md): FusionAuth 1.64.0 stores secret values in lambdas like a doggo stores rawhide bones in your couch cushions. - [Announcing FusionAuth 1.65 - Tenant Manager SSO Tasmanian Mountain Skink](https://fusionauth.io/blog/announcing-fusionauth-1-65.md): FusionAuth 1.65.0 emerges from brumation with self-service SSO configuration for tenants, custom favicons for simple themes, and a voice option for MFA accessibility. - [Announcing FusionAuth 1.68 - Intelligent Kamfa](https://fusionauth.io/blog/announcing-fusionauth-1-68.md): FusionAuth 1.68.0 puts its considerable brain power to the task of optimizing MFA challenge logic. - [New Billing Option - Online Annual Subscription](https://fusionauth.io/blog/annual-subscription.md): Online annual subscriptions to FusionAuth are here! Pay once and forget about it. - [How to Support Anonymous User Accounts and Access in Your App](https://fusionauth.io/blog/anonymous-user.md): Learn how to enable anonymous user access and account creation with FusionAuth. Support guest sessions before full registration. - [Announcing the FusionAuth Brainf* SDK](https://fusionauth.io/blog/april-fools-brainf.md): FusionAuth now supports Brainf*. Real JWTs. Real API calls. 14.7MB of compiled output. 28 hours of CPU time to initialize a buffer. It works. Mostly. - [FusionAuth Now Supports ARM Architecture](https://fusionauth.io/blog/arm-architecture-support.md): Discover how FusionAuth's support for ARM architecture enables developers to deploy authentication solutions on ARM-based systems, including IoT and cloud platforms. - [ASP.NET Core Identity Risks and Benefits](https://fusionauth.io/blog/asp-net-core-identity-considered-harmful.md): Learn why ASP.NET Core Identity can be limiting for modern applications. This article explores its trade-offs and outlines alternatives like standalone auth systems. - [The Auth Bottleneck Pattern](https://fusionauth.io/blog/auth-and-the-bottleneck-architecture.md): How and why to use a centralized user management system rather than having individual applications use their own auth components. - [Part 2 of 3 on authentication architecture | FusionAuth](https://fusionauth.io/blog/auth-architecture-part2-tmb.md): Learn how a token-mediating backend (TMB) is less secure than backend-for-frontend (BFF) and when to use TMB. Part 2 of 3 in the architecture-driven auth series. - [Create a Static Proxy with Auth Facade Pattern in Laravel](https://fusionauth.io/blog/auth-facade-pattern.md): Implement a static proxy with the auth facade pattern in Laravel to unify login flows. Support SAML, OIDC, and custom identity providers. - [Introducing Auth LLM](https://fusionauth.io/blog/auth-llm.md): The AI that knows who you are. - [FusionAuth vs Auth0: Hosting, Features, and On-Prem Support](https://fusionauth.io/blog/auth0-and-fusionauth-a-tale-of-two-solutions.md): Compare FusionAuth and Auth0 by features, pricing, and hosting. Learn how FusionAuth supports full on-prem setups—unlike Auth0's cloud-only model. - [Last Chance: Top 5 Reasons to Attend AuthCon 2025 (May 14-15 in NYC!)](https://fusionauth.io/blog/authcon-2025.md): Join top developers at AuthCon 2025, the first conference dedicated to Customer Identity and Access Management (CIAM), happening May 14-15 in NYC. - [AuthCon 2025 Customer Identity and Access Management Conference Announced](https://fusionauth.io/blog/authcon-press-release.md): AuthCon 2025 is a customer identity and access management conference for developers, architects, and security pros. Join experts to explore auth best practices. - [WebAuthn Guide: Understanding Authenticators & Ceremonies](https://fusionauth.io/blog/authenticators-ceremonies-webauthn-oh-my.md): Learn how WebAuthn works with examples. Explore our guide to authenticators, ceremonies, passkeys, and other terminology. - [How To Choose The Right Authorization And Authentication Deployment Model](https://fusionauth.io/blog/authn-authz-deployment-models-cerbos-webinar.md): Self-hosted, single-tenant cloud, or multi-tenant SaaS. What is the best option for you? - [How to Protect Your Organization From Auth Vendor Lock-in](https://fusionauth.io/blog/avoid-lockin-insulate-your-application-and-have-backup-plan-excerpt.md): When considering an auth provider, you should pick the best one for your current needs. But how can you avoid implementation pain if your needs change? - [Save on your AWS bill with this one simple trick](https://fusionauth.io/blog/aws-savings-plans.md): A gentle intro to purchasing Compute Savings Plans on AWS. - [B2B2C vs B2B2E Models Explained for SaaS Platforms](https://fusionauth.io/blog/b2b2c-vs-b2b2e.md): Learn the difference between B2B2C and B2B2E in SaaS. See how identity needs change when serving customers vs. employees in multi-tenant apps. - [BFF security architecture: Surviving supply chain attacks | FusionAuth](https://fusionauth.io/blog/backend-for-frontend-security-architecture.md): Learn why Backend-for-Frontend (BFF) is the only auth architecture that survives npm supply chain attacks. Part 1 of 3 in our architecture-driven auth series. - [A Guide to Backend-for-Frontend (BFF) Auth | FusionAuth](https://fusionauth.io/blog/backend-for-frontend.md): Learn about the OAuth backend for frontend (BFF), also known as an OAuth proxy. - [Become Education chooses FusionAuth for IDaaS](https://fusionauth.io/blog/become-education-fusionauth.md): Career Education as a Service startup Become Education evaluated IDaaS services and chose FusionAuth because FusionAuth understood them. - [FusionAuth is a 2023 Best Place to Work](https://fusionauth.io/blog/best-places-to-work.md): FusionAuth has been named a Best Place to Work and Best Startup to Work from BuiltinDenver. - [Mobile App Authentication Best Practices | OAuth for Mobile Apps](https://fusionauth.io/blog/best-practices-for-oauth-in-mobile-apps.md): Explore OAuth and OIDC best practices for mobile apps, including login flows, token storage, and secure authentication using industry standards. - [How Betty Blocks Uses FusionAuth for Scalable Platform Authentication](https://fusionauth.io/blog/betty-blocks-fusionauth.md): Learn how Betty Blocks uses FusionAuth to provide enterprise-grade authentication for over 10,000 low-code applications, eliminating identity provider taxes while maintaining massive scale performance. - [Bilt Scales Travel Industry Authentication with FusionAuth | Case Study](https://fusionauth.io/blog/bilt-fusionauth.md): How Bilt utilizes FusionAuth's CIAM platform to manage millions of users, ensuring secure and scalable authentication within the travel industry. - [Building Secure, Scalable Authentication with FusionAuth and Google Cloud](https://fusionauth.io/blog/bilt-google-cloud.md): Learn how FusionAuth and Google Cloud deliver modern authentication infrastructure designed for growing user bases and mission-critical applications. - [Breached password detection best practices](https://fusionauth.io/blog/breached-password-detection-best-practices.md): How can you protect your systems and users from known, breached passwords? - [How to enable breached password detection with FusionAuth](https://fusionauth.io/blog/breached-password-detection.md): How can you easily prevent your users from using passwords that have been cracked and made available for sale on the web? By enabling breached password detection with FusionAuth. - [FusionAuth Welcomes New CEO Brian Bell to Lead Next Phase of Growth](https://fusionauth.io/blog/brian-bell-ceo-pr.md): Founder and CEO Brian Pontarelli to Transition to Role of Chief Technology Officer. - [A New CEO, Words from Our Customers, and Unstoppable Momentum](https://fusionauth.io/blog/brian-bell-fusionauth-ceo.md): FusionAuth appoints Brian Bell as CEO as the company continues explosive growth. Learn about our new leadership, customer success stories scaling to 10,000+ apps, and latest developer-focused content updates. - [Browser-Based OAuth Client: Why this OAuth architecture is insecure](https://fusionauth.io/blog/browser-based-oauth-client-security-architecture.md): Why BBOC is the least secure OAuth pattern, when it's acceptable, how to implement it safely, and how to migrate to secure architectures. - [Building a CLI app with the Device Code grant and golang](https://fusionauth.io/blog/building-cli-app-with-device-grant-and-golang.md): Build an authenticated CLI app using FusionAuth, the Device Code grant, and the golang client library. - [How to Build a Homebrew Formula for FusionAuth](https://fusionauth.io/blog/building-fusionauth-homebrew-formula.md): Learn how to create a Homebrew formula to install FusionAuth on macOS. Follow this step-by-step guide to build, test, and publish a custom package. - [Building a user profile portal with Flask, OAuth, and APIs](https://fusionauth.io/blog/building-profile-portal-with-flask-oauth-apis.md): Advanced registration forms let you easily build out multi-step registration forms, but how do you let the users modify their profile data? - [How to Secure a Rails API With JWTs](https://fusionauth.io/blog/building-protected-api-with-rails-and-jwt.md): Learn how to secure a Rails REST API using JWTs. This guide shows how to add token-based auth with FusionAuth and a Rails JWT gem. - [Building a Self-Hostable Application | Self-Hosted SaaS Architecture Guide](https://fusionauth.io/blog/building-self-hostable-application.md): Learn how to design and build a self-hostable SaaS application. This guide covers key architectural decisions, deployment models, and packaging strategies for self-hosted apps. - [Customer Identity and Access Management (CIAM) vs Identity and Access Management (IAM)](https://fusionauth.io/blog/ciam-vs-iam.md): What are the main differences between CIAM and IAM? - [Circleboom chose FusionAuth for single sign-on across their products](https://fusionauth.io/blog/circleboom-fusionauth-single-sign-on.md): Circleboom helps people strengthen their social media circles by creating easy-to-use, intuitive design applications. They chose FusionAuth over several evaluated alternatives to offer a unified login experience to their customers. - [ClearSpend Implements Seamless Authentication with FusionAuth](https://fusionauth.io/blog/clearspend-customizes-fusionauth.md): ClearSpend uses FusionAuth's self-hosted, API-driven platform to deliver seamless authentication across web and mobile applications. - [Set Up AWS CloudFront Custom Domain for FusionAuth](https://fusionauth.io/blog/cloudfront.md): Learn how to configure a custom domain for FusionAuth using AWS CloudFront. This guide covers SSL certificate setup, DNS configuration, and distribution settings. - [Cohort Analysis](https://fusionauth.io/blog/cohort-analysis.md): Using login data to calculate helpful business statistics. - [Okta Acquires Auth0: What It Means for Developers and CIAM](https://fusionauth.io/blog/congrats-auth0-okta-acquisition.md): Explore what Okta's acquisition of Auth0 means for identity management, developers, and the CIAM market, and how FusionAuth's approach remains different. - [Using and Managing Consents in an Express App](https://fusionauth.io/blog/consents-example.md): Build an app with marketing consent options and allow your users to update their preferences. - [Contaim Implements Developer-Friendly Auth with FusionAuth](https://fusionauth.io/blog/contaim-fusionauth.md): Contaim uses FusionAuth for user management, OAuth, social sign-on, and two-factor authentication, streamlining their auth lifecycle. - [How Contenda saved 'a lot' of time with FusionAuth](https://fusionauth.io/blog/contenda-saved-time-with-fusionauth.md): Contenda, a tool to democratize and increase quality written content, used FusionAuth instead of rolling their own auth stack. - [Critical infrastructure and latency in gaming](https://fusionauth.io/blog/critical-infrastructure-latency-gaming.md): What is critical infrastructure and how does it affect gaming latency? - [CurrentDesk saved thousands of dollars by choosing FusionAuth](https://fusionauth.io/blog/currentdesk-saved-with-fusionauth.md): CurrentDesk, a financial technology provider, choose FusionAuth for affordability, flexibility and developer friendliness. - [How to Use Custom OAuth Scopes in Third-Party Applications](https://fusionauth.io/blog/custom-scopes-in-third-party-applications.md): Define and implement custom scopes in FusionAuth to secure third-party application access with OAuth. Includes real-world example and best practices. - [Cybanetix deployed on-prem FusionAuth as part of a PCI-DSS compliant solution](https://fusionauth.io/blog/cybanetix-fusionauth-pci-dss.md): FusionAuth offered Cybanetix the ability to unify the authentication and authorization mechanisms across all customers' solutions and avoid locally managed credentials. - [Data Partners And The GDPR - Questions To Ask](https://fusionauth.io/blog/data-partners-gdpr-questions-to-ask.md): Here are the questions you should ask your data partners to make sure they, and you, are GDPR compliant. - [DataStax Adopts FusionAuth for Customizable Authentication](https://fusionauth.io/blog/datastax-switch-fusionauth-case-study.md): DataStax improved performance by 59% and saved over 50,000 by switching to FusionAuth for a customizable authentication solution. - [Deactivating, reactivating, and deleting a FusionAuth user in Python](https://fusionauth.io/blog/deactivating-reactivating-deleting-user-fusionauth-python.md): This is a step-by-step guide to deactivate, reactivate, or delete a user within your applications using API calls from the FusionAuth Python client library. - [dealcloser chooses FusionAuth, saves two months of development time](https://fusionauth.io/blog/dealcloser-saves-developer-time-with-fusionauth.md): dealcloser, a legaltech startup, uses FusionAuth to solve their enterprise needs. - [Denver Startup Week Wrap Up](https://fusionauth.io/blog/denver-startup-week-wrapup.md): Denver Startup Week is the largest free startup event anywhere. Get details on the 2019 events. - [Automatically Deploy An Application that uses FusionAuth For Authentication Using Vercel](https://fusionauth.io/blog/deploy-vercel.md): Learn how to configure Vercel and GitHub to automatically deploy a Vue.js app that uses FusionAuth for authentication each time new code is committed to the source. - [Digital Identity - Human Elements of a Connected World](https://fusionauth.io/blog/digital-identity.md): Your identity is so much more than the pieces of paper and plastic that sit in a wallet. In today's world, your digital identity is valuable, and ever-changing. - [Digital Twin Technology and Identity](https://fusionauth.io/blog/digital-twins.md): Learn about digital twins—virtual replicas of physical systems—and their role in optimizing performance and reducing downtime in the real world. - [Deploying FusionAuth on DigitalOcean using the One-Click Installer](https://fusionauth.io/blog/digitalocean-oneclick-installation.md): In this tutorial, you'll learn how to deploy FusionAuth to DigitalOcean. - [Disclosure conference report: a good time was had by all](https://fusionauth.io/blog/disclosure-conference-report.md): Disclosure is an annual security conference. I attended and brought back this report. - [Adding social sign in to your Django web application using OAuth](https://fusionauth.io/blog/django-and-oauth.md): In this tutorial, we'll build a basic Django web application using FusionAuth for an easier and safer way of handling user registration and authentication. - [Your Token Proves Who You Are, Not What You Own](https://fusionauth.io/blog/dji-token-auth.md): One engineer reverse-engineered his DJI vacuum's API for fun and accidentally accessed 7,000 devices worldwide. Here's the authorization failure that made it possible — and how to make sure it doesn't happen to you. - [Video conferencing company DolphinVC chose FusionAuth for cloud independence](https://fusionauth.io/blog/dolphinvc-fusionauth.md): DolphinVC chose FusionAuth because it saved them time and they could run it wherever they wanted. They didn't want to be restricted to a single cloud provider. - [Creating a user in FusionAuth with a .NET Core CLI client](https://fusionauth.io/blog/dot-net-command-line-client.md): Use the FusionAuth APIs to create and manage a user using the .NET Core client libraries. - [Create .NET web applications with FusionAuth templates](https://fusionauth.io/blog/dotnet-templates.md): Reduce the overhead associated with customer authentication and authorization when creating a .NET web application using FusionAuth templates. - [Download File Counts from Google Cloud Storage](https://fusionauth.io/blog/download-counts-from-google-cloud-storage.md): Getting download file counts from Google Cloud Storage using access logs and a Ruby script. - [Download and Install FusionAuth Tutorial - Linux](https://fusionauth.io/blog/download-install-linux-tutorial.md): Download and install FusionAuth on Linux with these easy steps. - [Install FusionAuth on macOS: Quick Setup Guide](https://fusionauth.io/blog/download-install-mac-tutorial.md): Get FusionAuth running on macOS in minutes. Follow step‑by‑step instructions to download, unzip, install FusionAuth App & Search, and complete setup in-browser. - [Integrate FusionAuth with Your Node.js Application](https://fusionauth.io/blog/easy-integration-fusionauth-nodejs.md): Integrate FusionAuth into your Node.js application using Express. This guide covers setup, API key creation, and user authentication steps. - [Easy Integration of Spring and FusionAuth](https://fusionauth.io/blog/easy-integration-of-fusionauth-and-spring.md): Making a Spring application with FusionAuth is easy, just follow these simple steps. - [Eduplaytion self-hosts FusionAuth for easier compliance and increased sales](https://fusionauth.io/blog/eduplaytion-self-hosts-fusionauth.md): The Numetry learning platform uses FusionAuth for authentication and parental consent management. - [Ellii Chose FusionAuth to Secure the Future of EdTech](https://fusionauth.io/blog/ellii-case-study.md): Discover how Ellii, a leading EdTech company, transformed their authentication infrastructure with FusionAuth. Learn about their seamless migration, enhanced security, and how they achieved zero downtime while focusing on educational innovation instead of auth maintenance. - [Beyond Passwords - The Evolution of Digital Identity](https://fusionauth.io/blog/evolution-digital-identity.md): Our defenses are not just smarter, but also more intuitive, molding around our individual lives like never before. - [Extending FusionAuth roles with Cerbos](https://fusionauth.io/blog/extending-fusionauth-roles-with-cerbos.md): Sometimes RBAC isn't enough and you need more fine-grained permissions. FusionAuth seamlessly integrates with Cerbos to provide that option. - [Fine-Grained Authorization Explained | Data Access Control in Modern Apps](https://fusionauth.io/blog/fine-grained-authorization.md): Learn how fine-grained authorization enables secure, context-aware data access control. This guide explores roles, attributes, and strategies for managing user permissions effectively. - [FusionAuth vs Firebase: CIAM Feature Comparison](https://fusionauth.io/blog/firebase-and-fusionauth-ciam-comparison.md): Compare FusionAuth and Firebase for CIAM solutions. Explore differences in deployment models, customization options, and user management capabilities. - [FITT Finder Scales Authentication with FusionAuth](https://fusionauth.io/blog/fitt-finder-fusionauth.md): FITT Finder uses FusionAuth to manage scalable authentication, preparing for millions of users with OAuth, JWTs, and social sign-on integration. - [Understanding ForgeRock Password Storage Formats](https://fusionauth.io/blog/forgerock-password-storage.md): ForgeRock stores user passwords using PBKDF2-HMAC-SHA256. Understand the structure and components for secure password migration. - [2024 Year In Review](https://fusionauth.io/blog/fusionauth-2024-year-in-review.md): Looking back over 2024 and what the FusionAuth team shipped. - [A CRO's Perspective: User Identity Isn't Complete Without Authorization](https://fusionauth.io/blog/fusionauth-acquires-permify.md): FusionAuth acquires Permify to unify authentication and fine-grained authorization in one platform, delivering RBAC, ABAC, and ReBAC capabilities for modern applications. - [FusionAuth Advanced MFA Gives Developers Flexibility, Control in Deploying Authentication Factors](https://fusionauth.io/blog/fusionauth-advanced-mfa.md): With FusionAuth Advanced MFA, developers can layer in different authentication factors such as TOTP, multiple phone numbers or email addresses, step up authentication, applications and even new factors as they are introduced to the market. - [How FusionAuth is affected by the SVB failure](https://fusionauth.io/blog/fusionauth-and-svb.md): Wondering how FusionAuth is affected by the failure of SVB? Read this post to find out. - [Why Use Terraform With FusionAuth](https://fusionauth.io/blog/fusionauth-and-terraform.md): Learn why using Terraform with FusionAuth is beneficial. - [What's Next - A Note From FusionAuth's CEO](https://fusionauth.io/blog/fusionauth-and-updata.md): Learn how FusionAuth simplifies customer identity and access management for developers, and why partnering with Updata will help scale to meet demand. - [FusionAuth announces BioTech™](https://fusionauth.io/blog/fusionauth-announces-biotech.md): A game-changing new factor of authentication. - [Kickstart FusionAuth with the CLI](https://fusionauth.io/blog/fusionauth-cli-kickstart.md): The FusionAuth CLI now comes with the ability to install and kickstart a FusionAuth instance directly from your command line. - [Level Up Your Workflow with the FusionAuth CLI](https://fusionauth.io/blog/fusionauth-cli.md): Learn how the FusionAuth Node CLI can streamline your development workflow by automating common operational tasks, from managing themes and email templates to generating thousands of test users in seconds. - [FusionAuth Appoints Dayna Rothman as CMO and David Hayes as Head of Product to Support Accelerated Growth](https://fusionauth.io/blog/fusionauth-cmo-product-momentum.md): FusionAuth strengthens the executive team to lead the next era of Customer Identity. - [We'll see you at CodeMash](https://fusionauth.io/blog/fusionauth-codemash.md): FusionAuth is going to CodeMash. Stop by and see us! - [FusionAuth Selected as Winner for Colorado Companies to Watch](https://fusionauth.io/blog/fusionauth-colorado-company-to-watch.md): We're excited to announce that we have been honored as a 2023 Colorado Company to Watch. - [FusionAuth Achieves Data Privacy Framework Certification](https://fusionauth.io/blog/fusionauth-dpf.md): Secure and compliant EU-US data transfers made simple. - [Meet the FusionAuth Team at devcom, gamescom, and AWS Summit LA](https://fusionauth.io/blog/fusionauth-events-august-2025.md): Single-tenant, downloadable, yours: meet the team that builds auth differently. - [FusionAuth 1.7 Release Provides Advanced Consent Management and Family Relationship Models](https://fusionauth.io/blog/fusionauth-family-model-consent-management.md): FusionAuth 1.7 provides advanced consent management and family relationship modeling allowing you to quickly comply with complex COPPA and data control regulations. - [FusionAuth Secures Growth Investment From Updata Partners](https://fusionauth.io/blog/fusionauth-funding.md): FusionAuth announces a $65 million strategic investment from Updata Partners to accelerate product innovation and expand identity solutions for developers. - [FusionAuth Named a Customer Identity High Performer for Fall 2023](https://fusionauth.io/blog/fusionauth-g2-fall23.md): G2's Fall 2023 reports are here, and we are honored to continue to be recognized as a high performer in the customer identity space year after year. - [FusionAuth G2 Reviews: Recognized as High Performer](https://fusionauth.io/blog/fusionauth-g2-high-performer.md): See why FusionAuth earned G2 High Performer status in CIAM, IAM & SSO with strong reviews, ease of use, API-first design, and self-hosted flexibility. - [FusionAuth Named a Momentum Leader in G2's 2026 CIAM Grid](https://fusionauth.io/blog/fusionauth-g4-leader-winter-26.md): FusionAuth earned Momentum Leader status in G2's Winter 2026 CIAM Grid. Learn what momentum signals mean for engineering teams evaluating identity infrastructure. - [Deploy FusionAuth on Kubernetes with Helm Chart](https://fusionauth.io/blog/fusionauth-google-kubernetes-engine-deployment.md): Install FusionAuth on GKE using the official Helm chart. Step-by-step guide covers GKE setup, database provisioning, Helm install, and configuration best practices. - [FusionAuth Renews IDPro Membership: Benefits Overview](https://fusionauth.io/blog/fusionauth-idpro-membership-benefits.md): Explore how FusionAuth's IDPro membership enhances developer education through community engagement, access to the Body of Knowledge, and CIDPRO certification. - [FusionAuth Climbs Inc. 5000 List for 2024](https://fusionauth.io/blog/fusionauth-inc-5000-2024.md): FusionAuth advanced to #1269 on the 2024 Inc. 5000 list, reflecting over 65% annual growth and continued expansion in the CIAM market. - [FusionAuth named to the 2023 Inc 5000 list](https://fusionauth.io/blog/fusionauth-inc-5000.md): FusionAuth has been named one of the fastest-growing companies in the United States with 354% revenue growth in the past 3 years. - [FusionAuth Launches Intelligent MFA in Latest Release as Demand Surges for Identity Infrastructure Customers Can Control](https://fusionauth.io/blog/fusionauth-intelligent-mfa-pr.md): New 10-signal risk engine brings transparent, adaptive authentication to dedicated and customer-controlled deployments as FusionAuth closes another quarter of record bookings. - [Beyond SaaS: The Benefits of Dedicated CIAM for Modern Applications](https://fusionauth.io/blog/fusionauth-intro-webinar.md): An overview of a recent FusionAuth webinar explaining why dedicated infrastructure for your CIAM solution is the right answer in 2025. - [FusionAuth announces Pass-wordle™](https://fusionauth.io/blog/fusionauth-introduces-pass-wordle.md): Login gamified. - [FusionAuth releases SimplePass](https://fusionauth.io/blog/fusionauth-introduces-simplepass.md): Why enter a password when the system can do it for you? - [FusionAuth Achieves ISO 27001 Certification](https://fusionauth.io/blog/fusionauth-iso27001-2025.md): Developer-first authentication platform demonstrates ongoing commitment to world-class security standards. - [FusionAuth Named KuppingerCole RisingStar for Customer Identity and Access Management (CIAM) Excellence](https://fusionauth.io/blog/fusionauth-kuppingercole-2025.md): Developer-first platform recognized for unique, dedicated architectural approach and rapid market growth. - [FusionAuth Lambda HTTP Connect: Extend Auth Workflows](https://fusionauth.io/blog/fusionauth-lambda-http-connect.md): Learn how FusionAuth's Lambda HTTP Connect lets you call external APIs during login. Ideal for integrating microservices, directories, or cloud services in auth flows. - [We'll see you at LFI 2023](https://fusionauth.io/blog/fusionauth-learning-from-incidents.md): FusionAuth is going to the Learning From Incidents conference. Stop by and see us! - [IoT company picks FusionAuth to avoid getting distracted by auth](https://fusionauth.io/blog/fusionauth-lets-iot-firm-focus-their-app.md): FusionAuth allows an IoT company to ignore auth and focus on building their applications. - [We'll see you at Longhorn PHP 2023](https://fusionauth.io/blog/fusionauth-longhornphp-2023.md): FusionAuth will be at Longhorn PHP. Say hi! - [Open Source Sponsorship](https://fusionauth.io/blog/fusionauth-loves-open-source.md): FusionAuth loves open source, and we love sponsoring it too. - [Introducing the FusionAuth MCP Server: Your AI Just Got Smarter](https://fusionauth.io/blog/fusionauth-mcp-server.md): The FusionAuth MCP server lets AI assistants like Claude interact directly with your FusionAuth instance through natural language commands. - [FusionAuth Rings in 100% Revenue Growth at the Beginning of 2025](https://fusionauth.io/blog/fusionauth-momentum-2024.md): Fueled by strong demand for downloadable, dev-first Customer Access and Identity Management (CIAM). - [FusionAuth Names Don Bergal as CEO to Further Advance Sales of Company's Developer-First Identity and Access Management Platform](https://fusionauth.io/blog/fusionauth-names-don-bergal-ceo.md): Veteran B2B tech leader Don Bergal joins FusionAuth and focuses on driving organic growth. - [Deploy FusionAuth on DigitalOcean Marketplace in One Click](https://fusionauth.io/blog/fusionauth-on-digitalocean-marketplace.md): Launch FusionAuth via DigitalOcean's Marketplace for seamless authentication on Kubernetes. Get one‑click deployment, billing integration, and scaling best practices. - [Deploy FusionAuth on Fly.io Using Docker Compose](https://fusionauth.io/blog/fusionauth-on-fly-io.md): Learn how to deploy FusionAuth on Fly.io with Docker Compose and Postgres. Step-by-step tutorial uses flyctl, Dockerfiles, and internal networking. - [Deploy FusionAuth on Render: Step-by-Step Guide](https://fusionauth.io/blog/fusionauth-on-render.md): Learn how to deploy FusionAuth on Render using Docker and PostgreSQL. This tutorial covers setup, environment variables, and initial configuration steps. - [FusionAuth Partner Program: Collaborate with Cloud Experts](https://fusionauth.io/blog/fusionauth-partner-program.md): The FusionAuth Partner Program connects companies with leading cloud partners like AWS and Google to enhance authentication solutions. - [FusionAuth 1.5 Adds Passwordless Login](https://fusionauth.io/blog/fusionauth-passwordless.md): FusionAuth 1.5 adds passwordless login and more. Download and upgrade now! - [FusionAuth Acquires Permify, Unifying AuthN + AuthZ in a Single Deploy Anywhere Platform](https://fusionauth.io/blog/fusionauth-permify-pr.md): Full control is the new security posture. - [We'll see you at AWS re:Invent](https://fusionauth.io/blog/fusionauth-re-invent-2.md): FusionAuth is going to AWS re:Invent. Stop by and see us! - [We'll see you at AWS re:Invent 2023](https://fusionauth.io/blog/fusionauth-re-invent-2023.md): FusionAuth is going to AWS re:Invent. Stop by and see us! - [We'll see you at AWS re:Invent 2022](https://fusionauth.io/blog/fusionauth-re-invent.md): FusionAuth is going to AWS re:Invent. Stop by and see us! - [FusionAuth Identity & Access Management Solution Is Recognized with Industry Distinctions from Leading SaaS Review Platform](https://fusionauth.io/blog/fusionauth-recognized-industry-distinctions-comparecamp.md): FusionAuth received the 2019 Great User Experience and Rising Star Awards. - [FusionAuth at AWS re:Invent 2024](https://fusionauth.io/blog/fusionauth-reinvent-2024.md): Join us at AWS re:Invent 2024. Meet the team, get demos, and win some great prizes. - [FusionAuth Introduces Advanced Threat Detection to Help Safeguard User Identity](https://fusionauth.io/blog/fusionauth-releases-advanced-threat-detection.md): This feature simplifies process for developers to protect against malicious logins and account takeovers. - [FusionAuth Launches Entity Management; Simplifies Creating & Managing Fine-Grained Permissions Across All Applications](https://fusionauth.io/blog/fusionauth-releases-entity-management.md): This feature simplifies creating and managing fine-grained permissions across all applications, is simple to use and integrate, and lets developers focus on core work. - [FusionAuth Reviews from Around the World](https://fusionauth.io/blog/fusionauth-reviews-around-world.md): FusionAuth has been downloaded 40k times by companies all over the world. - [FusionAuth Achieves SOC 2 Type 2 Certification](https://fusionauth.io/blog/fusionauth-secures-soc2-type2-certification.md): FusionAuth earned its SOC 2 Type 2 certification, demonstrating its commitment to stringent security standards and robust governance practices. - [FusionAuth 1.4 Adds Self-Service Registration, TypeScript Client Library & More](https://fusionauth.io/blog/fusionauth-self-service-registration-typescript.md): FusionAuth 1.4 is now available adding Self-Service Registration, Typescript Client Library and more. - [FusionAuth achieves SOC2 Type II certification](https://fusionauth.io/blog/fusionauth-soc2-type2-certification.md): The FusionAuth team is proud to announce that we have completed the rigorous audit process and have now earned SOC2 Type II certification for our entire organization, including the FusionAuth product. - [FusionAuth Adds Enterprise Kubernetes Support, Making It Simple to Add Authentication & Authorization Support to Kube Clusters](https://fusionauth.io/blog/fusionauth-supports-kubernetes.md): FusionAuth, the authentication and authorization platform built for developers, today announced Enterprise Kubernetes Support. By deploying FusionAuth into their Kubernetes clusters, teams have an API-first, developer friendly identity provider for all their credentials and token management needs. - [FusionAuth 1.6 Adds SAML Support and More](https://fusionauth.io/blog/fusionauth-update-saml.md): FusionAuth 1.6 adds SAML support, Lambdas and much more in this new release. Download and upgrade now! - [VC Free - How we Bootstrapped FusionAuth to Profitability](https://fusionauth.io/blog/fusionauth-vc-free.md): FusionAuth - Our story of moving from profanity filters to a bootstrapped and profitable developer-focused business in the CIAM market. - [Web Summit Conference Guide: Tips for Lisbon 2025](https://fusionauth.io/blog/fusionauth-web-summit.md): Plan your Web Summit 2025 experience with this guide. Learn how to network, pitch, and navigate Lisbon's biggest tech conference. - [The FusionAuth website - How we do it](https://fusionauth.io/blog/fusionauth-website-how-we-do-it.md): How we built the FusionAuth website using BootstrapStudio, Jekyll, JustComments and other tools. - [Customizer User Management with FusionAuth APIs](https://fusionauth.io/blog/get-more-value-out-of-fusionauth.md): Utilize FusionAuth APIs for user maintenance tasks like validation, workflow automation, and branding to streamline your application's user management. - [Getting Started with Email Templates in FusionAuth](https://fusionauth.io/blog/getting-started-with-email-templates.md): Emails should represent your brand, and FusionAuth's email templates help you do that with ease. - [What Is GNAP? A New Authorization Protocol Beyond OAuth2](https://fusionauth.io/blog/gnap-next-gen-oauth.md): GNAP (Grant Negotiation and Authorization Protocol) is a next-gen auth standard under development. Learn how it differs from OAuth2 and why it matters. - [What happens when you spend $32 Billion on security and still aren't secure?](https://fusionauth.io/blog/google-cloud-2026.md): Google Cloud Next just showed us where AI security is headed. The industry is chasing visibility. Here's what they're still missing. - [Got Users? How About 100 Million of Them?](https://fusionauth.io/blog/got-users-100-million.md): FusionAuth can handle hundreds of millions of users easily, because you might need to. - [Grammarly's OAuth mistakes](https://fusionauth.io/blog/grammarly-proves-ciam-not-optional.md): Grammarly's OAuth mistakes and what they mean for you. - [Grand Line of Fine-Grained Authorization | Permify & FusionAuth](https://fusionauth.io/blog/grand-line-of-fine-grained-authorization.md): The FusionAuth acquisition of Permify through an engineer conversation and why it matters for fine-grained authorization. - [Hackfests at FusionAuth](https://fusionauth.io/blog/hackfests-fusionauth.md): How we hackfest at FusionAuth. - [Controlling a hotspot with FusionAuth authentication](https://fusionauth.io/blog/hotspot-authentication-with-fusionauth.md): Implement authentication and authorization using FusionAuth to allow web surfing at devices behind a firewall. - [How single sign-on works](https://fusionauth.io/blog/how-sso-works.md): Single sign-on is a key part of the web experience. How does it typically work? - [OAuth in React: How to Add OAuth 2.0 to Your React App](https://fusionauth.io/blog/how-to-authenticate-your-react-app.md): Learn how to add OAuth 2.0 to your React application. This guide walks through integrating OAuth in React to secure user authentication with step-by-step instructions. - [OAuth Scopes: A Guide to Secure Third-Party Access](https://fusionauth.io/blog/how-to-design-oauth-scopes.md): Learn how to design OAuth scopes to control third-party access in your app. This guide covers scope types, best practices, and secure API integration. - [How To Get Support For FusionAuth FGA By Permify](https://fusionauth.io/blog/how-to-get-support-for-fusionauth-fga-permify.md): Learn how to get community and enterprise support for FusionAuth FGA by Permify, the fine-grained authorization engine now part of the FusionAuth platform. - [How to integrate with FusionAuth using PHP](https://fusionauth.io/blog/how-to-integrate-fusionauth-with-php.md): A quick overview of integrating with FusionAuth using PHP. This post covers creating and registering a user, changing their password, generating a login report and then deleting the user. - [How to migrate from Azure AD B2C](https://fusionauth.io/blog/how-to-migrate-from-azure-ad-b2c.md): Planning to migrate from Azure AD B2C? This guide explains how to export users, handle password hashes, and transition to a new identity provider securely. - [Cognito Migration Guide | How to Migrate Users from Amazon Cognito](https://fusionauth.io/blog/how-to-migrate-from-cognito.md): Learn how to migrate users from Amazon Cognito to a new auth provider so you can remove Cognito. This guide covers bulk migration and slow migration options with step-by-step instructions. - [How to migrate your user data from Google Firebase](https://fusionauth.io/blog/how-to-migrate-from-firebase.md): How to migrate user data from Firebase Authentication to another project or identity provider. This guide covers export methods, password handling, and reauthentication. - [Legacy User Migration: Centralizing Authentication Systems](https://fusionauth.io/blog/how-to-migrate-user-data-centralized-auth-system.md): Manage legacy user data migration to a centralized auth system. Explore strategies like big bang and migrate-on-authentication approaches. - [Angular OAuth2 Guide: Install CLI & Secure Implementation](https://fusionauth.io/blog/how-to-securely-implement-oauth-angular.md): Learn how to securely implement OAuth2 in Angular applications. This step-by-step guide covers installing Angular CLI, setting up authentication, and protecting routes with best practices. - [Rails OAuth Tutorial | Secure OAuth2 Login in Ruby on Rails with FusionAuth](https://fusionauth.io/blog/how-to-securely-implement-oauth-rails.md): Learn how to implement OAuth2 in Ruby on Rails using the authorization code grant. Set up secure Rails OAuth authentication with FusionAuth step by step. - [How to Set Up Single Sign-On Between FusionAuth and Joomla](https://fusionauth.io/blog/how-to-set-up-single-sign-on-between-fusionauth-joomla.md): In this tutorial, you'll be learning how to implement OAuth SSO for Joomla users. - [How to Set Up Single Sign-On Between FusionAuth and WordPress](https://fusionauth.io/blog/how-to-set-up-single-sign-on-between-fusionauth-wordpress.md): In this tutorial, you'll be learning how to implement OAuth SSO for WordPress users. - [How user verification works in FusionAuth: Version 1.59 changes](https://fusionauth.io/blog/how-user-verification-works.md): Understand how the new verified and verifiedReason fields work on the user object in FusionAuth. - [Hundreds Of Millions Of Entities](https://fusionauth.io/blog/hundreds-millions-entities.md): How Does FusionAuth Handle Large Numbers Of Entities? - [I Just Want Authentication To Work](https://fusionauth.io/blog/i-just-want-authentication-to-work.md): When I am writing an application the last thing that I care about is setting up authentication, I just want it to work! - [FusionAuth Snags Identity and Access Management Product of the Year](https://fusionauth.io/blog/iam-product-of-the-year.md): FusionAuth was awarded Identity and Access Management Product of the Year by Enterprise Security Magazine. - [Identity's Hidden Business Value](https://fusionauth.io/blog/identity-business-value.md): Identity is a key business asset, evolving from simple logins to a unified source of truth, enhancing user experience and driving personalized services. - [Stop Registration Spam With Identity Pre-Verification](https://fusionauth.io/blog/identity-pre-verification.md): Eliminate 'zombie' accounts and block registration spam. Learn how to use FusionAuth Identity Pre-Verification to verify Users via Email or Phone before they are created. - [Verify Identities During Self-Service Registration](https://fusionauth.io/blog/identity-verification-before-registration.md): Learn how you can verify the user's identity before allowing them to create an account using FusionAuth self-service registration and the Fideo Verify API. - [Identiverse 2024 Conference Highlights | FusionAuth Recap](https://fusionauth.io/blog/identiverse-conference-report.md): Get key takeaways from Identiverse 2021. Learn what FusionAuth learned and what trends shaped the identity and access management conversation. - [Auth0 and Okta Enterprise Pricing Explained: The Hidden IDP Tax](https://fusionauth.io/blog/idp-tax.md): This article breaks down enterprise connection fees in platforms like Auth0 and Okta, and how FusionAuth avoids the IDP tax. - [Illustrative Mathematics Saves 50% With FusionAuth](https://fusionauth.io/blog/illustrative-mathematics-saved-with-fusionauth.md): Illustrative Mathematics saved 50% on authentication costs by switching from Auth0 to FusionAuth, enhancing K–12 math content delivery. - [Security and privacy risks when implementing an auth system](https://fusionauth.io/blog/implementation-risks-excerpt.md): When implementing an auth system, what security concerns should be on your radar? - [Implementing FusionAuth with Python - from setup to first app](https://fusionauth.io/blog/implementing-fusionauth-python.md): This is a step-by-step guide to building your first functional Python application and retrieving user profile information with FusionAuth. - [Custom SSO with FusionAuth | Intelligov Case Study](https://fusionauth.io/blog/inteligov-fusionauth-sso.md): How Inteligov built custom SSO solutions using FusionAuth, integrating with Google Workspace and AD to simplify auth and create new revenue streams. - [Intelligent MFA Should Challenge Risk, Not Loyal Customers](https://fusionauth.io/blog/intelligent-mfa.md): FusionAuth 1.68 ships Intelligent MFA — 10 risk signals, scored inside your own deployment, and included in every paid plan because identity is critical infrastructure. - [Introducing passkeys](https://fusionauth.io/blog/introducing-biometric-authentication.md): FusionAuth, the developer-focused authentication platform, today announces the addition of passkey login using WebAuthn to its long list of authentication features. - [Introducing FusionAuth Reactor with Breached Password Detection](https://fusionauth.io/blog/introducing-fusionauth-reactor-breached-password-detection.md): FusionAuth Version 1.15.0 introduces FusionAuth Reactor with Breached Password Detection. Ensure your users aren't using insecure passwords at login. - [Use Custom Auth Domains With FusionAuth Cloud](https://fusionauth.io/blog/introducing-unlimited-custom-domains-for-fusionauth-cloud.md): FusionAuth Cloud now supports unlimited custom domains. Set up branded auth domains for each tenant or environment with TLS and isolation. - [Introduction to Login and Authentication Workflows](https://fusionauth.io/blog/introduction-login-authentication-workflows.md): Introduction to application types, login and authentication workflows. Start here to learn how to architect and design an effective authentication system. - [Inversoft Adds Andy Grolnick and Kendall Miller to Its Board of Directors](https://fusionauth.io/blog/inversoft-adds-grolnick-miller-board-directors.md): Veteran technologists bring expertise scaling innovative, security-focused businesses while creating organic growth. - [Inversoft, Inc. Reports Record Results on 314% annual FusionAuth ARR increase](https://fusionauth.io/blog/inversoft-record-results.md): Both FusionAuth and CleanSpeak software businesses achieve significant growth. - [Is FusionAuth GDPR Compliant?](https://fusionauth.io/blog/is-fusionauth-gdpr-compliant.md): FusionAuth is one of the few GDPR compliant identity and authentication solutions available. - [FusionAuth Appoints Jamey Miller as SVP of Engineering and Technology](https://fusionauth.io/blog/jamey-miller-svp-engineering.md): FusionAuth announces the appointment of Jamey Miller as SVP of Engineering and Technology, bringing 25+ years of experience scaling SaaS R&D organizations. - [java-http, A Simple, Fast HTTP Server with Virtual Threads](https://fusionauth.io/blog/java-http-new-release.md): java-http is a lightweight, zero-dependency Java HTTP server library that uses virtual threads to achieve 120,000+ requests per second with maintainable, synchronous-style code. - [Our New Vue, React and Angular SDKs](https://fusionauth.io/blog/javascript-sdks.md): JavaScript SDKs make integrating with FusionAuth easier. - [Jerry talks GDPR compliance, ARM images and paper manuals](https://fusionauth.io/blog/jerry-hopper-gdpr-arm-manuals.md): Community member Jerry Hopper discusses how he discovered FusionAuth and how it's helped him and his teams save development time and avoid authentication headaches. - [Join us for Boulder Startup Week](https://fusionauth.io/blog/join-us-boulder-startup-week.md): Boulder Startup Week is one of the best events for developers, founders, startups and VC entrepreneurs. Join us! - [JWT authorization in a microservices gateway](https://fusionauth.io/blog/jwt-authorization-microservices-gateway.md): How to handle authentication and authorization in microservices using JWTs and an API gateway. - [FusionAuth vs Keycloak: CIAM Platform Comparison for Developers](https://fusionauth.io/blog/keycloak-fusionauth-comparison.md): Compare FusionAuth and Keycloak CIAM solutions. Learn how they differ in features, support, cost, and deployment to choose the right identity platform. - [Like your avatar? You can keep it](https://fusionauth.io/blog/like-avatar-can-keep.md): FusionAuth can take advantage of your existing Gravatar account. No problem. - [Searching FusionAuth docs using an LLM](https://fusionauth.io/blog/llm-for-fusionauth-documentation.md): FusionAuth has made a large language model trained against FusionAuth docs available to the FusionAuth community. - [Breached Password Detection & Automatic Account Locking](https://fusionauth.io/blog/locking-an-account-with-breached-password.md): Learn how FusionAuth uses breached password detection and webhooks to automatically lock user accounts on compromised credentials. Includes PHP webhook setup. - [Log4j CVE: How it affects FusionAuth (TLDR: It doesn't)](https://fusionauth.io/blog/log4j-fusionauth.md): FusionAuth does not use Log4j and is not affected by CVE-2021-44228. - [Session Management Software Options in Auth Systems | FusionAuth](https://fusionauth.io/blog/logouts-and-sessions.md): Explore session management software options and how they handle logout behavior. Learn what to look for in tools that manage user sessions in modern auth systems. - [Maila Networks centralized authentication with FusionAuth on OpenStack](https://fusionauth.io/blog/maila-networks-fusionauth-openstack.md): Maila Networks uses FusionAuth and OpenStack to save months of development time. - [Manage custom user profile data in the FusionAuth admin](https://fusionauth.io/blog/manage-custom-user-profile-data.md): Once you have custom user data in the FusionAuth system, how can you update it? - [Protect an MCP server with an Authorization Server](https://fusionauth.io/blog/mcp-authorization-server.md): MCP servers can expose sensitive data and business logic to AI agents. Learn how to lock them down using OAuth. - [A Message from the Founder](https://fusionauth.io/blog/message-from-pontarelli.md): A message from the FusionAuth founder, Brian Pontarelli, regarding the transition from CEO to CTO and why he stepped down as CEO. - [How to Build a Microservices Gateway with FusionAuth](https://fusionauth.io/blog/microservices-gateway.md): Set up an API gateway for microservices using FusionAuth for auth. Learn how to centralize authentication and route requests in a secure eCommerce example. - [How to Migrate from Auth0 to FusionAuth](https://fusionauth.io/blog/migrate-from-auth0.md): Learn how to export users, password hashes, connections, and configs for a smooth transition from Auth0 to FusionAuth. No downtime, no password resets. - [Keycloak Price and the Hidden Costs of Free Enterprise Auth Platforms](https://fusionauth.io/blog/migrate-from-keycloak.md): Free enterprise authentication platforms like Keycloak come with hidden costs. Understand the operational costs that may impact your organization. - [User Migration Approaches | Account and Data Migration Explained](https://fusionauth.io/blog/migration-types.md): What is user migration and why does it matter? Understand account migration meaning, approaches to user data migration, and how to plan a successful transition. - [How to mitigate risk when your auth vendor gets acquired](https://fusionauth.io/blog/mitigate-acquisition-risks-auth-vendor-excerpt.md): What risk mitigation steps can you take when your auth vendor is acquired? - [Using the Family API with Consents](https://fusionauth.io/blog/modeling-family-and-consents.md): Using the Family API and Consents to control access to minors. - [FusionAuth Tenant Configuration in Single-Tenant Setup](https://fusionauth.io/blog/multi-tenancy-in-a-single-tenant-architecture.md): Learn how to configure tenants in FusionAuth's single-tenant architecture. FusionAuth supports managing multiple clients or environments with isolated settings. - [Tenant Infrastructure Risks in SaaS Platforms | Multi-Tenant Auth Pitfalls](https://fusionauth.io/blog/multi-tenant-hijack-2.md): Misconfigured tenant infrastructure can undermine SaaS platform authentication and security. Learn how to avoid common mistakes that break isolation in multi-tenant systems. - [Broken Access Control in Multi-Tenant SaaS | Preventing Authorization Flaws](https://fusionauth.io/blog/multi-tenant-hijack-3.md): Access control flaws are a top risk in multi-tenant SaaS apps. Learn how broken tenant-level authorization happens and how to design systems that isolate tenant data securely. - [How Multi-Tenant SaaS Hijacked Your Auth...and How to Take It Back](https://fusionauth.io/blog/multi-tenant-hijack.md): Weak multi-tenant SaaS security leads to tenant hijacking. This guide explains better authentication design to protect users and prevent tenant impersonation. - [New Feature - Login Theme](https://fusionauth.io/blog/new-feature-login-theme.md): Login themes allow you to completely customize the look and feel of your login pages. - [New Feature - Social Login for Facebook, Google, Twitter & More](https://fusionauth.io/blog/new-feature-social-login-facebook-google-twitter.md): It's easy to enable social logins like Facebook, Google, Twitter and OpenID Connect with FusionAuth. - [Adding magic links to your Next.js application using FusionAuth](https://fusionauth.io/blog/nextjs-and-fusionauth-passwordless.md): In this guide, you will build a simple web application using Next.js that allows a user to sign up and then login using a magic link sent to their email address. - [Next.js SSO with FusionAuth | Add OIDC to Your Next.js App](https://fusionauth.io/blog/nextjs-single-sign-on.md): Learn how to implement Single Sign-On in Next.js using OpenID Connect and FusionAuth. This step-by-step tutorial walks through setting up secure authentication in your Next.js app. - [Adding Twitter sign in to your Node.js + Express web application using OAuth](https://fusionauth.io/blog/nodejs-and-twitter-oauth.md): In this tutorial, we'll build a basic Express web application using FusionAuth to handle login via Twitter. - [OGGEH Cloud Computing switched to FusionAuth from Gluu](https://fusionauth.io/blog/oggeh-fusionauth-gluu.md): OGGEH Cloud Computing has a cloud computing platform that empowers front end developers. They chose FusionAuth and saved 40% because it requires less CPU and memory resources than Gluu. - [Omedym Adopts FusionAuth for Flexible Authentication](https://fusionauth.io/blog/omedym-chooses-fusionauth.md): Omedym replaced its former cloud provider with FusionAuth, enabling seamless SSO, protocol flexibility, and simplified user management. - [FusionAuth vs OneLogin: Key Differences Explained](https://fusionauth.io/blog/onelogin-and-fusionauth.md): Compare FusionAuth and OneLogin across features, pricing, and deployment options. Learn which CIAM solution aligns best with your organization's needs. - [Open Office Hours To Ask Anything About Identity, Authorization, and Authentication](https://fusionauth.io/blog/open-office-hours-19-12-17.md): Every month, ask the FusionAuth experts anything about identity, authorization, and authentication. - [What to consider before choosing an open source auth provider](https://fusionauth.io/blog/open-source-auth-considerations.md): Some of the pros and cons of open-source auth providers. - [Orbitvu Streamlines Authentication with FusionAuth](https://fusionauth.io/blog/orbitvu-fusionauth-story.md): Orbitvu improved authentication across applications by adopting FusionAuth, enabling seamless SSO, protocol flexibility, and simplified user management. - [Outsourcing auth: how to get buy-in from your team](https://fusionauth.io/blog/outsourced-auth-team-buy-in.md): Who are the players you'll need to work with to make an outsourced auth implementation successful? - [Partnering in The Passwordless Decade](https://fusionauth.io/blog/partnering-passwordless-decade.md): FusionAuth and HYPR partner to delivery the strongest security and best user experienced. - [Free Webinar - Passkeys Are The Path to Enhanced Digital Security](https://fusionauth.io/blog/passkeys-webinar.md): Join us for a free webinar to learn about passkeys, how they work, and how they can help set your business apart. - [History of Passwords: How the First Password Was Hacked](https://fusionauth.io/blog/password-history.md): The first password hacked was in 1966 by graduate student Allan Scherr at MIT. Learn more about the history of passwords. - [How to Perform a Bulk Permissions Check in FusionAuth FGA By Permify](https://fusionauth.io/blog/permify-bulk-permissions-check.md): Learn how to use FusionAuth FGA By Permify's Bulk Check API to verify multiple users' permissions across multiple resources in a single API call. - [Why Storing Passwords in Plaintext Is a Serious Risk](https://fusionauth.io/blog/plaintext-passwords.md): Storing passwords in plaintext is dangerous. This guide explains secure password storage and how to protect user credentials. - [Powered By Coffee helps WordPress scale with FusionAuth](https://fusionauth.io/blog/powered-by-coffee-fusionauth.md): Powered By Coffee is an agency that specializes in WordPress and helps organizations such as media companies with their subscription and membership models. - [Powerful Medical Chooses FusionAuth for Healthcare Authentication](https://fusionauth.io/blog/powerful-medical.md): Powerful Medical transitioned from AWS Cognito to FusionAuth's single-tenant solution, achieving scalable, compliant CIAM tailored for healthcare enterprises. - [Private Label Tenant Apps with FusionAuth Multi-Tenancy](https://fusionauth.io/blog/private-labeling-with-multi-tenant.md): FusionAuth's multi-tenant feature enables you to build white label tenant applications with isolated user data, custom branding, and flexible authentication options. - [Identity and Progressive Delivery](https://fusionauth.io/blog/progressive-delivery.md): Progressive delivery is the idea that instead of dumping a release of software onto your users, you allow them to control when new features get rolled out. How does identity play a role in this new software delivery concept? - [From Zero to Fortune 500: How Promptfoo Deployed Enterprise AI Security in One Week](https://fusionauth.io/blog/promptfoo-case-study.md): Learn how Promptfoo, an AI security startup, deployed enterprise-grade authentication for Fortune 500 customers in just one week using FusionAuth. From 3 to 12 enterprise clients with complex SSO, SAML, and on-premise requirements—all managed by a single engineer. - [FusionAuth Cracks the Code: Quantum Passwords and a Universe of Secure Logins](https://fusionauth.io/blog/quantum-computing.md): How FusionAuth has built the world's first Quantum Vault. - [A Quick Comparison Of Ping Identity And FusionAuth](https://fusionauth.io/blog/quick-comparison-ping-identity-and-fusionauth.md): Compare FusionAuth and Ping Identity for your identity and access management solution. - [Implement RBAC in Kubernetes Using FusionAuth and OIDC](https://fusionauth.io/blog/rbac-with-kubernetes-fusionauth.md): Learn how to implement role-based access control (RBAC) in Kubernetes using FusionAuth and OpenID Connect. Step-by-step guide for secure cluster access. - [Using the FusionAuth React SDK in a React application](https://fusionauth.io/blog/react-example-application.md): In this guide, we'll showcase how to use the FusionAuth React SDK to implement the login, logout, and registration flows in a React application. - [Readymag Enhances Authentication with FusionAuth's TypeScript Support](https://fusionauth.io/blog/readymag-typescript-apis-support-fusionauth.md): Readymag utilizes FusionAuth's API and TypeScript SDK to streamline authentication, enabling efficient user management and integration. - [Recon InfoSec switched to FusionAuth from AWS Cognito](https://fusionauth.io/blog/reconinfosec-fusionauth.md): Recon InfoSec Lead Architect Whitney Champion discusses how FusionAuth has helped her business provide a seamless experience to their end users. - [FusionAuth Remix Demo: Secure OAuth in Remix Apps](https://fusionauth.io/blog/remix-demo.md): Explore a step‑by‑step FusionAuth Remix demo and learn how to replace cookie‑based auth with secure OIDC, session storage, and scalable login flows. - [Auth Outages & Breaches: Is Your Provider a Single Point of Failure?](https://fusionauth.io/blog/saas-blast-radius.md): Traditional multi-tenant identity providers create blast radius risk. One breach or outage impacts every customer. Learn how isolated identity infrastructure eliminates this single point of failure for financial services and healthcare organizations. - [How Sales Engineering Works at FusionAuth](https://fusionauth.io/blog/sales-engineering.md): Dive into the role of the Sales Engineer at FusionAuth. Learn how we make it easy to adopt a new CIAM provider. - [OIDC vs SAML: What's the Difference Between OpenID Connect and SAML?](https://fusionauth.io/blog/saml-and-oidc-difference.md): Compare OIDC vs SAML in this guide to modern authentication protocols. Learn the differences between OpenID Connect and SAML to choose the right solution for your app's identity needs. - [Boosting Login UX with FusionAuth Integration | SATAC Case Study](https://fusionauth.io/blog/satac-fusionauth-improve-experience.md): Learn how SATAC leverages FusionAuth and social sign-on to enhance their login user experience, achieving a 92% satisfaction rate from applicants. - [Auth specific scaling challenges](https://fusionauth.io/blog/scaling-auth-system-excerpt.md): What are the elements of an authentication system which make it difficult to scale? - [How to Securely Implement OAuth in React](https://fusionauth.io/blog/securely-implement-oauth-in-react.md): This post describes how to securely implement OAuth in a React application using the Authorization Code Grant (with FusionAuth as the IdP). - [Vue.js OAuth2 Integration Guide | Secure Auth with FusionAuth](https://fusionauth.io/blog/securely-implement-oauth-vuejs.md): Learn how to implement OAuth2 in Vue.js using FusionAuth. This step-by-step guide covers login, logout, secure token handling, user data, and Express server setup. - [Securing A Golang App with OAuth](https://fusionauth.io/blog/securing-a-golang-app-with-oauth.md): How to secure a Golang microservice using JWTs. This tutorial covers validating tokens, setting up middleware, and building a secure auth layer. - [Securing an ASP.NET Core Razor Pages app with OAuth](https://fusionauth.io/blog/securing-asp-netcore-razor-pages-app-with-oauth.md): We'll build a web application using ASP.NET Core and control page access using FusionAuth and the Authorization Code grant. - [Securing a Flutter App with OAuth](https://fusionauth.io/blog/securing-flutter-oauth.md): How can you use Flutter, OAuth and OIDC together? - [Securing a Go Microservice with JWT](https://fusionauth.io/blog/securing-golang-microservice.md): How to use JWTs to secure your golang microservices. - [React Native Authentication with OAuth | FusionAuth Integration Guide](https://fusionauth.io/blog/securing-react-native-with-oauth.md): Implement secure React Native authentication using OAuth and FusionAuth. Follow this step-by-step tutorial to set up React Native OAuth with PKCE and user info retrieval. - [Securing APIs | Guide to API Keys & Scopes](https://fusionauth.io/blog/securing-your-api.md): Learn how to secure your APIs using API keys and OAuth scopes, including best practices for verification, authorization, and protecting endpoints. - [We'll see you at GDC](https://fusionauth.io/blog/see-you-at-gdc.md): FusionAuth is going to the 2022 Game Developers Conference. Stop by and see us! - [We'll see you at Gluecon](https://fusionauth.io/blog/see-you-at-gluecon.md): FusionAuth is going to Gluecon 2022. Stop by and see us! - [See you at KCDC 2023!](https://fusionauth.io/blog/see-you-at-kcdc-2023.md): KCDC, the Kansas City Developer Conference, is happening at the end of this week, and FusionAuth will be there. - [FusionAuth is going to KCDC](https://fusionauth.io/blog/see-you-at-kcdc.md): FusionAuth is going to KCDC Conference in Kansas. Stop by and see us! - [We'll see you at THAT Conference](https://fusionauth.io/blog/see-you-at-that-conference.md): FusionAuth is going to THAT Conference in Wisconsin. Stop by and see us! - [Seegno Chooses FusionAuth for Multi-Tenant Authentication](https://fusionauth.io/blog/seegno-thousands-tenants.md): Seegno uses FusionAuth and Kubernetes to manage over 5,000 tenants, replacing their custom auth system with multi-tenant authentication. - [How to Set Up SSO for NodeBB Forums Using FusionAuth and OIDC](https://fusionauth.io/blog/setting-up-single-sign-on-for-nodebb.md): Learn how to connect FusionAuth to your NodeBB forum for single sign-on (SSO) using OpenID Connect. Improve UX and simplify login with one secure identity. - [ASP.NET Core Example: Display Custom Claims from a JWT](https://fusionauth.io/blog/sharing-custom-oauth-claims-with-a-asp-netcore-app.md): See a working ASP.NET Core example that adds custom JWT claims using FusionAuth. Allow your ASP.NET users' identity to be extended with role-based or app-specific data. - [Django SSO Integration with FusionAuth | OIDC for Django Apps](https://fusionauth.io/blog/single-sign-on-django-fusionauth.md): Set up Django SSO using OpenID Connect and FusionAuth. This guide shows how to integrate OIDC into your Django app for secure, centralized authentication. - [Laravel Single Sign-On (SSO) with FusionAuth | Integration Guide](https://fusionauth.io/blog/single-sign-on-laravel-fusionauth.md): Enable Single Sign-On (SSO) in Laravel with FusionAuth. Learn how to integrate authentication, streamline user login, and enhance security in your Laravel application. - [Implementing FusionAuth SSO for Unified Access](https://fusionauth.io/blog/single-sign-on-sso-with-fusionauth.md): How to set up FusionAuth's single sign-on (SSO) to enable users to access multiple applications with a single login, enhancing security and user experience. - [Single Logout Explained | SAML SLO Guide](https://fusionauth.io/blog/single-sign-on-vs-single-log-out.md): Learn how Single Logout (SLO) works with SAML, why it's essential for secure SSO sessions, and how to implement it with best practices and FusionAuth. - [How to Set Up Discord SSO With FusionAuth](https://fusionauth.io/blog/single-sign-on-with-discord.md): Enable Discord single sign-on in your app using FusionAuth. This guide walks through setup and integration for Discord SSO support. - [How to Enable Drupal SSO with FusionAuth (OIDC Integration)](https://fusionauth.io/blog/single-sign-on-with-drupal.md): Set up single sign-on in Drupal using FusionAuth as your OIDC identity provider. Step-by‑step guide with module install, app config, attribute mapping. - [How to Set Up Shopify SSO With FusionAuth](https://fusionauth.io/blog/single-sign-on-with-shopify.md): Learn how to add Shopify single sign-on using FusionAuth. This guide walks through enabling SSO for custom Shopify apps with OAuth support. - [Scale a Cloud-Hosted Single-Tenant Deployment ](https://fusionauth.io/blog/single-tenant-scaling.md): How to scale a cloud-hosted or self-hosted single-tenant deployment with FusionAuth. Ideal for environment isolation, client namespaces, and dev/test setups. - [SOC 2 - Inside The Matrix](https://fusionauth.io/blog/soc2-matrix.md): Download the SOC 2 controls matrix for vendor selection and risk assessment. See which vendor we chose to help us with our SOC2. - [Softozor integrated FusionAuth with Hasura and Kubernetes and saved development effort](https://fusionauth.io/blog/softozor-fusionauth-hasura-kubernetes.md): While working on a consulting project building an e-commerce platform, Softozor chose FusionAuth to manage their authentication and authorization. - [Adding sign in to your Spring web application using OIDC](https://fusionauth.io/blog/spring-and-fusionauth.md): In this tutorial, we'll build a basic Spring web application using FusionAuth to handle login and registration. - [Spring Framework CVE: How it affects FusionAuth (TLDR: It doesn't)](https://fusionauth.io/blog/spring-fusionauth.md): FusionAuth does not use Spring and is not affected by CVE-2022-22965. - [The State of Homegrown Authentication in 2025 | FusionAuth Report](https://fusionauth.io/blog/state-homegrown-auth-2025.md): Explore the 2025 landscape of homegrown authentication solutions. This FusionAuth report reveals why many development teams prefer building their own login systems over adopting multi-tenant SaaS CIAM platforms. - [Sunfinity self hosts FusionAuth for a "huge win in control, productivity and cost"](https://fusionauth.io/blog/sunfinity-fusionauth-python.md): Sunfinity uses FusionAuth as their centralized auth system and connected it to their sales CRM, ops ticketing and other custom applications. - [Supercharge Development with FusionAuth](https://fusionauth.io/blog/supercharge-development-with-fusionauth.md): FusionAuth is a secure and comprehensive identity and access management tool designed for developers by developers. The solution, which can be deployed on-prem or through cloud-based servers, plugs seamlessly into applications and can be fully customized. By pairing high-level customer support with low price points, FusionAuth is putting streamlined development within reach for a growing number of programmers. - [Our Beta Swift SDK for iOS](https://fusionauth.io/blog/swift-sdk-beta.md): Swift SDK for iOS makes integrating with FusionAuth easier. - [Switchboard.app reduced their estimated migration time by 66% using FusionAuth](https://fusionauth.io/blog/switchboard-reduced-migration-time.md): Switchboard, a collaborative digital workspace where people meet to work on any project, with any application or file, uses FusionAuth for OAuth and creating custom JWTs. - [Talent Funnel chose FusionAuth because it was API first and developer friendly](https://fusionauth.io/blog/talent-funnel-fusionauth.md): Talent Funnel runs the premier UK student job site and uses FusionAuth for their auth needs, including MFA, social sign-on and registration. - [Tangany self-hosts FusionAuth to meet regulatory requirements](https://fusionauth.io/blog/tangany-fusionauth-self-hosted-regulatory.md): Tangany, a regulated German fintech company, needed to self-host to satisfy regulatory requirements; they found FusionAuth. - [Stop Being Your Customers' SSO Helpdesk](https://fusionauth.io/blog/tenant-manager-sso.md): Enterprise SSO has always come with a tax — on your team's time, on your per-connection bill, or both. FusionAuth 1.65.0 cuts it. - [How to Test Your FusionAuth SAML Configuration With IAMShowcase](https://fusionauth.io/blog/test-saml-configuration.md): Use IAMShowcase to run SAML tests and validate your FusionAuth identity provider setup. Follow this guide to troubleshoot and confirm your SAML integration. - [How to get the most out of a free auth provider trial](https://fusionauth.io/blog/the-value-of-try-before-you-buy-excerpt.md): When you are trialing auth software, how can you make most effective use of this time? - [How to theme FusionAuth's advanced registration forms](https://fusionauth.io/blog/theme-registration-form.md): Advanced registration forms let you easily build out multi-step registration forms. You can use FusionAuth's full theming power to change how they look. - [Three tips for handling spiky gameday launches](https://fusionauth.io/blog/tips-for-gameday-launches.md): Game launches often result in large traffic spikes. How can you plan for these. - [Should You Mock in Integration Tests? When to Mock Your Auth](https://fusionauth.io/blog/to-mock-or-not-mock-auth.md): Learn when to mock your authentication and if mocking suits your testing strategy. - [Additional JWT headers, verification emails, and disappearing registrations](https://fusionauth.io/blog/top-forum-posts-apr-2021.md): Top highlights from the FusionAuth forum in April. - [C# API calls, SMTP configuration and authentication](https://fusionauth.io/blog/top-forum-posts-mar-2021.md): Top highlights from the FusionAuth forum in March. - [NextAuth, SSO with the Login API, and duplicate key errors](https://fusionauth.io/blog/top-forum-posts-may-2021.md): Top highlights from the FusionAuth forum in May. - [Treefort All-in-One Auth System: White‑Label Streaming with FusionAuth](https://fusionauth.io/blog/treefort-uses-fusionauth-for-all-auth.md): Treefort Systems uses FusionAuth as its complete auth platform to secure white‑label streaming apps (web, iOS, Android), admin portals, APIs, and chat services. - [Understanding JSON Web Tokens (JWTs)](https://fusionauth.io/blog/understanding-json-web-tokens-jwt.md): A high level view of Json Web Tokens (JWT). - [MFA Explained: What It Is, Why It Matters, and How It Works](https://fusionauth.io/blog/understanding-multifactor-authentication-mfa.md): Understand multi-factor authentication (MFA): how it strengthens login security, when to use it, and what factors like biometrics and apps are involved. - [Understanding OAuth 2.0 Grant Types - A Quick Guide](https://fusionauth.io/blog/understanding-oauth2-grant-types.md): A quick guide to OAuth 2.0 grant types: authorization code, implicit (deprecated), client credentials, and more. Choose the best flow for web apps, APIs, and devices. - [Understanding The Authorization Code Grant](https://fusionauth.io/blog/understanding-the-authorization-code-grant.md): You'll dive into the benefits of Authorization Code Grant in simplifying your app's authentication flows. - [Unio self hosts FusionAuth and saves $100k](https://fusionauth.io/blog/unio-saves-100k-with-fusionauth.md): Unio uses FusionAuth to handle their user accounts, authentication, authorization, and password management. - [From ALB to Caddy - Our Wandering Path to Supporting Thousands of Domain Names](https://fusionauth.io/blog/unlimited-domains-fusionauth.md): How we used Caddy with \to support unlimited domains with automatic HTTPS with FusionAuth. Explore basic DDoS protection and secure multi-domain setups. - [Unsupervised Integrates Upstream Providers with FusionAuth](https://fusionauth.io/blog/unsupervised-avoids-development-maintenance-with-with-fusionauth.md): Unsupervised uses FusionAuth to integrate with clients' upstream identity providers, reducing development overhead and simplifying authentication workflows. - [Securing your legacy PHP business application with OAuth](https://fusionauth.io/blog/updating-crufty-php-application.md): We all have them. Line of business applications that have their own user datastore. How can you update them to use a centralized user datastore? - [FusionAuth Review and Case Study: Why UrbanSitter Chose It for B2B Auth](https://fusionauth.io/blog/urbansitter.md): See how UrbanSitter selected FusionAuth to power authentication for their B2B platform. This FusionAuth case study highlights customization, support, and technical fit. - [User Data Security is a Breach](https://fusionauth.io/blog/user-data-security-is-a-breach.md): User data security includes hardware, software, and human challenges. Use this guide with code examples to secure your system from hacks and exploits. - [User registration and sign-in with Laravel and FusionAuth](https://fusionauth.io/blog/user-registration-and-sign-in-with-laravel.md): We'll build a Laravel application that delegates user management, registration, and login to FusionAuth. - [User Segmentation](https://fusionauth.io/blog/user-segmentation.md): How the right user segmentation model matters for your application, why it is important, and how to choose. - [Tucan uses FusionAuth with CockroachDB](https://fusionauth.io/blog/using-fusionauth-with-cockroachdb.md): Tucan uses FusionAuth with CockroachDB as their database. - [Multi-Platform Video Uploads: Using Identity Provider Links](https://fusionauth.io/blog/using-identity-provider-links.md): Learn how to build a video upload application that connects to multiple services like Google and X.com (Twitter) using FusionAuth's Identity Provider Links. - [Using Java to manage FusionAuth](https://fusionauth.io/blog/using-java-to-manage-fusionauth.md): How to use Java to manage users, applications and more with FusionAuth. - [How to Add OAuth Login to Gatsby With PKCE](https://fusionauth.io/blog/using-oauth-and-pkce-to-add-authentication-to-your-gatsby-site.md): Add secure login to your Gatsby site using OAuth and PKCE. This tutorial shows how to use FusionAuth and the Authorization Code Flow. - [Using the FusionAuth Setup Wizard](https://fusionauth.io/blog/using-the-setup-wizard.md): The FusionAuth Setup Wizard makes setting up FusionAuth a simple step-by-step process. - [Using FusionAuth User Actions](https://fusionauth.io/blog/using-user-actions.md): In this tutorial, you'll create User Actions to coordinate events around a customer purchase. - [Using Webhooks In FusionAuth To Delete User Data](https://fusionauth.io/blog/using-webhooks-to-delete-user-data.md): Use FusionAuth's webhooks to ensure that you can delete all a user's data when they request it. GDPR compliance has never been easier. - [Vatix Chooses FusionAuth to Streamline Authentication and Save Developer Resources](https://fusionauth.io/blog/vatix-fusionauth.md): What happens when your homegrown auth system is no longer sustainable? - [Scaling IoT Authentication with FusionAuth | Viam Case Study](https://fusionauth.io/blog/viam-case-study.md): Viam uses FusionAuth's multi-application architecture to manage secure, scalable authentication for their IoT platform and customer applications. - [WeRoad Switches from Auth0 to FusionAuth | Case Study](https://fusionauth.io/blog/weroad-fusionauth.md): WeRoad improved authentication scalability and reduced costs by migrating from Auth0 to FusionAuth, gaining full control over their user data. - [WeRoad migrated from Auth0 to FusionAuth](https://fusionauth.io/blog/weroad-migrated-from-auth0-to-fusionauth.md): WeRoad brings travelers together for live-changing travel and used FusionAuth to simplify their auth infrastructure. - [What happens to the tokens after an OAuth Authorization Code grant?](https://fusionauth.io/blog/what-happens-after-oauth-authentication-event.md): After OAuth login, what comes next? This article explains how OAuth tokens are issued, where they're stored, and how they're used in applications. - [What is FedCM?](https://fusionauth.io/blog/what-is-fedcm.md): FedCM, or Federated Credential Management, is a web standard being developed by the W3C to create a more secure and privacy-conscious way for users to log into websites using third-party identity providers. - [What is SCIM?](https://fusionauth.io/blog/what-is-scim.md): What is SCIM and why would you use it? - [What is WebAuthn and Why It Matters for Authentication](https://fusionauth.io/blog/what-is-webauthn-why-do-you-care.md): WebAuthn, short for Web Authentication, is a passwordless, browser-based API. It supports account security with biometrics and public-key cryptography. - [Updates to the OAuth Specification | OAuth 2.1 RFC Explained](https://fusionauth.io/blog/whats-new-in-oauth-2-1.md): Learn how the updated OAuth specification in the OAuth 2.1 RFC simplifies the protocol by consolidating core features, omitting the implicit grant, and more. - [What's Wrong With the OAuth2 Implicit Grant?](https://fusionauth.io/blog/whats-wrong-with-implicit-grant.md): Learn why the OAuth2 implicit flow is deprecated. This guide explains the problems with the OAuth implicit grant and what secure alternatives you should use instead. - [When to Self-Host Your Authentication System](https://fusionauth.io/blog/when-to-self-host.md): When should you use self-hosted authentication? Learn the pros, cons, and use cases for self-hosting identity instead of using SaaS. - [Why use a standardized auth protocol?](https://fusionauth.io/blog/why-consider-standards-based-auth-options-excerpt.md): What are the main reasons you should think about using a standarized authentication and authorization protocol such as OAuth? - [Why Cross-Platform Authentication Matters in Gaming](https://fusionauth.io/blog/why-cross-platform-gaming-account.md): Cross-platform account systems improve the player experience and retention. Learn how unified identity helps with game access across devices. - [Is the OAuth Device grant right for your game authentication needs?](https://fusionauth.io/blog/why-device-grant-game-login.md): How can the OAuth Device Authorization grant help your users easily authenticate into your game? - [Why is there no authentication in OAuth?](https://fusionauth.io/blog/why-no-auth-in-oauth.md): OAuth and OIDC are all about authentication, right? Why is there no process of authentication defined in the specifications? - [Why Outsourcing OAuth Enhances Security and Efficiency](https://fusionauth.io/blog/why-outsource-auth.md): Explore the advantages of externalized authentication. Learn how outsourcing OAuth can improve security, reduce development time, and simplify maintenance. - [Why Passkeys Matter](https://fusionauth.io/blog/why-passkeys-matter.md): The world needs a better solution than passwords. Passkeys improve security while also being easier to use. - [Why secure gamer's user accounts?](https://fusionauth.io/blog/why-secure-gaming-accounts.md): What are risks to gamer accounts and why should you secure them? - [Why You Should Use Multi‑Factor Authentication (MFA)](https://fusionauth.io/blog/why-user-multi-factor-authentication.md): Learn how multi-factor authentication, or MFA, protects against stolen credentials, phishing, and unauthorized access in modern apps. - [Winning the customer auth market](https://fusionauth.io/blog/winning-customer-auth-market.md): Explaining the FusionAuth market position and the customer identity and access management (CIAM) landscape in more detail. - [Adding native integrations to your app with FusionAuth and Xkit](https://fusionauth.io/blog/xkit-and-fusionauth.md): How to use FusionAuth and Xkit together to simplify auth and integration development. - [ZanoCloud helps companies make the most of the cloud with FusionAuth](https://fusionauth.io/blog/zanocloud-helps-companies-with-fusionauth.md): ZanoCloud helps companies with a variety of problems and reaches for FusionAuth for their auth needs. - [Zendesk Single Sign-on (SSO) with FusionAuth and HYPR](https://fusionauth.io/blog/zendesk-sso-with-hypr.md): Learn how to set up Zendesk to authenticate with FusionAuth and HYPR. - [Zero Trust and How IdPs Factor Into It](https://fusionauth.io/blog/zero-trust-idps.md): Learn about the Zero Trust framework and how Identity Providers factor into it to protect your network and help keep your resources secure.