OpondoVeroh

[OpondoVeroh @OpondoVeroh]

@Manuelogotti @PatrickAlphaC

[OpondoVeroh @OpondoVeroh]

@Manuelogotti

[OpondoVeroh @OpondoVeroh]

@Kixc01 Mirema, Roysambu BnB @ 2500ksh CALL 0712401030
✅ Private studio 🏠
✅ Bright, well-lit room ☀️
✅ Secure parking 🚗
✅ 24/7 security
✅ Free Wi-Fi 📶
✅ Stylish breakfast counter with bar stool 🍳
✅ Comfy queen size bed 🛏️ with spring mattress

[OpondoVeroh @OpondoVeroh]

@Entr_dawood Mirema, Roysambu BnB @ 2500ksh CALL 0712401030
✅ Private studio 🏠
✅ Bright, well-lit room ☀️
✅ Secure parking 🚗
✅ 24/7 security
✅ Free Wi-Fi 📶
✅ Stylish breakfast counter with bar stool 🍳
✅ Comfy queen size bed 🛏️ with spring mattress

[OpondoVeroh @OpondoVeroh]

@EdwinNgany Mirema drive, Roysambu studio BnB @ 2500ksh CALL 0712401030
✅ Private spacious studio 🏠
✅ Bright, well-lit room ☀️
✅ Secure parking 🚗
✅ 24/7 security
✅ Free Wi-Fi 📶
✅ Stylish breakfast counter with bar stool 🍳
✅ Comfy queen size bed 🛏️ with spring mattress

[OpondoVeroh @OpondoVeroh]

@Mumiasfinest Studio BnB in Mirema drive, Roysambu @ 2500ksh call 0712401030 to book

[OpondoVeroh @OpondoVeroh]

@Entr_dawood Studio BnB located in Mirema drive, Roysambu @ 2500ksh

[Abdulkadir | Cybersecurity @cyber_razz]

Visited a data center today

And it was the most beautiful place I’ve ever seen

[OpondoVeroh @OpondoVeroh]

@PSCKenya Password reset please

[OpondoVeroh @OpondoVeroh]

@PSCKenya Pls reset my password

[Nikki Siapno @NikkiSiapno]

SSO (Single Sign-On) explained.

SSO can be thought of as a master key to open all different locks. It allows a user to log in to different systems using a single set of credentials.

In a time where we are accessing more applications than ever before, this is a big help to mitigate password fatigue and streamlines user experience.

To fully understand the SSO process, let’s take a look at how a user would log into LinkedIn using Google as the identity provider:

1) User requests access

First, the user would attempt to access the Service Provider (LinkedIn). At this point, a user would be presented with login options, and in this example, they would select "Sign in with Google".

2) Authentication request

From here, the Service Provider (LinkedIn) will redirect the user to the Identity Provider (Google) with an authentication request.

3) IdP checks for active session

Once the Identity Provider (Google) has received the request, it will check for an active session. If it doesn't find one, authentication will be requested.

4) User submits credentials

At this stage, the user will submit their login credentials (username and password) to the Identity Provider (IdP).

5) IdP verifies credentials

The Identity Provider will then verify the submitted credentials against its User Directory (database). If the credentials are correct, the IdP will create an authentication token or assertion.

6) IdP sends token to Service Provider

Once the token or assertion has been created, the IdP sends it back to the Service Provider confirming the user's identity. The user is now authenticated and can access the Service Provier (LinkedIn).

7) Access granted using existing session

Since the Identity Provider has established a session, when the user goes to access a different Service Provider (eg; GitHub), they won't need to re-enter their credentials. Future service providers will request authentication from the Identity Provider, recognize the existing session, and grant access to the user based on the previously authenticated session.

SSO workflows like the above operate on SSO protocols, which are a set of rules that govern how the IdP and SP communicate and trust each other. Common protocols include Security Assertion Markup Language (SAML), OpenID Connect, and OAuth.

💭 I’d love to hear your thoughts. What part do you find most challenging about implementing SSO? 💬

~~
Thank you to our partner Postman who keeps our content free to the community.

Do you have team members who are blocked because they're waiting for you to ship a new API? Unblock them using mock servers.

Learn more here: https://t.co/XCkQDPax15

[OpondoVeroh @OpondoVeroh]

@PSCKenya Password reset

[OpondoVeroh @OpondoVeroh]

@PSCKenya Good morning @PSCKenya , password resets are not getting delivered to email. I've checked in my spam folders there is no email. Kindly assist.

[Riya @reevs_here]

Cybersecurity Domain and certificate required
(recommended)🔖

[OpondoVeroh @OpondoVeroh]

@jimNjue_ #RutoMustGo

[OpondoVeroh @OpondoVeroh]

@RodgersKipembe #RutoMustGo

[OpondoVeroh @OpondoVeroh]

@Nyaberih_ #RutoMustGo

[OpondoVeroh @OpondoVeroh]

@AlinurMohamed_ #RutoMustGo

[OpondoVeroh @OpondoVeroh]

@Nyaberih_ #RutoMustGo

[OpondoVeroh @OpondoVeroh]

@HeemMufc #RutoMustGo