December 2022 Summaries

FusionAuth has been recognized as a High Performer in G2's Winter 2023 report, ranking well above category averages for user satisfaction. The company was awarded Highest User Adoption, Easiest To Do Business With, and Best Meets Requirements within the Customer Identity and Access Management industry. FusionAuth's feature set is considered hard to beat by users, who praise its themeable multi-tenant aspect, full OAuth 2 support, and built-in registration, login, and forgot password flows. Users also appreciate the product's ease of implementation, excellent documentation, and control over user data through self-hosting options like Docker. The company's commitment to delivering a high-quality authentication platform for developers has earned it a reputation as a trusted solution in the industry.

Single logout (SLO) is a crucial counterpart to single sign-on (SSO), offering a streamlined process for users to log out of multiple applications simultaneously after using a single login credential. While SSO has been widely adopted for its convenience, SLO lags behind, often due to challenges in implementation and adoption by identity providers (IdPs) and service providers, which can lead to security vulnerabilities. SLO operates by leveraging the existing SSO architecture, using protocols like Security Assertion Markup Language (SAML) to manage user sessions across applications. It enhances security by ensuring that logging out from one application terminates all active sessions associated with the same identity. Best practices for implementing SLO include managing idle sessions, enforcing short session lifetimes, and incorporating multi-factor authentication to bolster security. However, widespread adoption faces hurdles such as lack of support from some IdPs and service providers, and technical challenges related to browser cookie policies. As cybersecurity becomes increasingly prioritized, the adoption of SLO is expected to grow, driven by regulatory requirements and organizational focus on security.

FusionAuth version 1.41 was released in November 2022, bringing new features such as WebAuthn support for secure biometric login, improvements to Steam login functionality, and IdP provisioning for the FusionAuth admin UI, allowing administrators to control user access via federation. The release includes 19 issues, enhancements, and bug fixes, including support for passkeys, which enable users to log in securely using biometric means, and enhancements to Steam login, allowing users to link accounts with a session ticket. Users can upgrade to the latest version or learn more about the changes in the release notes, which provide detailed information on the modifications, enhancements, and new features included in the update.