March 2022 Summaries

As internet usage surges, businesses increasingly rely on user management systems to retain customers and gather data, yet managing multiple services can be cumbersome without the right tools. Single sign-on (SSO) solutions, such as FusionAuth, offer a streamlined authentication process by allowing users to access various applications with a single set of credentials, thus enhancing user experience and reducing security risks. FusionAuth, an identity provider, supports integration with platforms like Shopify, offering comprehensive features like OAuth, OpenID Connect, and SAML, along with compliance with data protection laws. This tutorial demonstrates how to integrate SSO into a Shopify store using FusionAuth, allowing customers to have a cohesive login experience across services, from the store to forums or customer support systems. The integration process includes installing and configuring necessary apps, setting up the FusionAuth instance, and testing the setup to ensure seamless operation, ultimately improving user experience and simplifying user management.

FusionAuth, an authentication and authorization platform built for developers, has announced its support for ARM-based architecture, allowing developers to run FusionAuth on various platforms such as IoT devices and high-performance cloud platforms. The company's commitment to running anywhere is reflected in its decision to support ARM processors, enabling it to cater to a wide range of use cases. By supporting ARM-based infrastructure, FusionAuth aims to make authentication simple, secure, and deployable anywhere, while also making developers' lives easier by providing them with the freedom to build on their choice of technology. The platform is designed for developers of all kinds, from hobbyists to professionals, and offers a range of features such as self-hosted or cloud software, extensive documentation, free options, fast deployment, and a no-hassle process.

The Game Developers Conference in San Francisco will host thousands of attendees, including the FusionAuth team, who will participate due to the platform's specific features beneficial to game developers, such as integration with chat profanity filtering and single sign-on capabilities with major gaming platforms like Xbox, Steam, and PS5. FusionAuth is excited to meet their gaming industry clients in person, attend sessions like “The Art of the Big Con” and “‘Age of Empires IV’: Machine Learning Trials and Tribulations”, and engage in the valuable spontaneous conversations that occur in person. They invite attendees to visit their booth in the Expo hall for demos, discussions, and a chance to win prizes, and they highlight a talk by their founder on handling logins and registrations at scale.

The latest version of FusionAuth, version 1.35, has been released with several key improvements and new features, including support for HTTP requests in FusionAuth lambdas, which allows for complex integrations by allowing a lambda to retrieve data from external URLs. This feature is particularly useful for adding custom claims based on business logic specific to the user and application, calling IdP endpoints to retrieve additional data, or making arbitrary HTTP requests within a lambda. The release also includes internal upgrades to the GraalJS JavaScript execution engine, which provides long-term support for a more modern version of JavaScript and allows for HTTP requests. Additionally, there are several bug fixes and enhancements included in this release, including a fix for the Windows startup script and improvements to the passwordless flow.

FusionAuth version 1.34, released in February 2022, introduces several enhancements, including comprehensive support for PKCE across its internal infrastructure to bolster security in OAuth processes, a reworked delivery of Client Id and Client Secret for improved compliance with OpenID Connect Identity Providers, and built-in support for a 512-bit PBKDF2 key length to accommodate common password hashing practices. These updates aim to enhance security, compatibility, and ease of integration without requiring modifications to existing external integrations. Users are encouraged to review the release notes thoroughly and test their integrations, especially when using the OIDC Identity Provider, before upgrading in production environments. The release offers detailed guidance for both self-hosted and cloud deployments, ensuring that users can smoothly transition to the new version.

Single sign-on (SSO) is a centralized user management system that solves the issue of multiple inter-related applications requiring separate user management systems, resulting in redundant data and increased complexity. SSO eliminates the need for users to remember different credentials across applications, providing a seamless authentication experience. FusionAuth is an identity provider that acts as the central hub for user information, communicating with multiple applications through secure protocols like SAML and OAuth. The process of integrating SSO into a Drupal site using FusionAuth involves installing the necessary module, configuring FusionAuth, and setting up the OpenID Connect client in Drupal. With this setup, users can log in to the application using their email and password, or register for an account directly through the application, eliminating the need for separate user management systems.

Brad Kite, CTO at Cybanetix, discusses how his company employs FusionAuth to streamline their security operations by unifying authentication and authorization processes. Cybanetix offers outsourced security operations center services and custom security solutions, relying on FusionAuth to integrate various identity platforms such as Office 365 and Okta. This integration facilitates a single identity platform using SAML and OAuth technologies, improving security and efficiency by reducing the need for separate account management and manual processes. Despite minor challenges with group-based application registration, FusionAuth has saved development costs, enhanced customer experiences, and facilitated PCI-DSS compliance due to its on-premise deployment capabilities. The product's ability to "just work" with minimal maintenance has been a significant advantage, although Kite suggests improvements in group-based application assignments for future updates.