May 2025 Summaries

Betty Blocks, a leading low-code software development platform based in the Netherlands, has adopted FusionAuth as its authentication solution to empower businesses to build software applications without requiring technical expertise. The company recognized a gap in the market for an authentication system that would provide enterprise-grade security, flexibility, and extensive feature support while aligning with their open, flexible business model. After evaluating numerous authentication providers, Betty Blocks selected FusionAuth due to its unified architecture, open and flexible model, no "identity provider tax," developer-first approach, and ease of use and implementation. The company has successfully scaled its implementation to remarkable levels, supporting over 10,000 applications with minimal infrastructure, and continues to grow as a recognized player in the low-code space.

OAuth scopes allow users to grant permission for third-party applications to access data held by an organization. Scopes are essential in ensuring proper security and consent around data access, especially as APIs become more prevalent and agentic AI grows. To design effective scopes, organizations should consider the needs of both external developers and end-users. Scopes should be specific to business offerings, well-defined, and not too granular or broad. They should also be used in conjunction with roles for a more comprehensive authorization system. The organization running the platform holding the data defines the meaning of each scope, which can include resources, operations, and hierarchical structures. When designing scopes, it's essential to consider versioning, deprecation, and the impact on third-party developers who will use them. Organizations should also document their scopes clearly, provide examples, and test their implementation thoroughly. Scopes are a critical component of OAuth and can significantly enhance user experiences by allowing developers to request data and functionality in a standardized way.

FusionAuth and Terraform are being used together to automate the manual configuration of identity resources, reducing repetitive work, version control, ensuring consistency across environments, and facilitating disaster recovery and repeatability. This setup allows for minimal clicking and maximum control over FusionAuth configurations, making it ideal for managing complex authentication stacks. By defining resources in code, Terraform enables automation and repeatability, which are essential as infrastructure grows in complexity.

Tyler Deren, Lead Architect and Security Officer at Eduplaytion, a Norwegian ed-tech company, discussed how his team uses FusionAuth to meet their authentication needs. Eduplaytion develops the Numetry learning platform, which teaches math through an interactive digital media application that explores a mysterious solar system. The company chose FusionAuth over alternatives like KeyCloak due to its exceptional documentation and ability to check all the boxes they were looking for. They use FusionAuth to connect with the Norwegian federated identity service provider, manage user data, and provide secure communication between different services in their backend. Additionally, they utilize the Families API to collect consent from parents or guardians on behalf of students, ensuring compliance with European data privacy regulations. By self-hosting FusionAuth, Eduplaytion reduces its sub-processor list and improves sales pipeline comfort among municipalities and school boards. The company has saved months and months of manpower by using FusionAuth instead of building their own identity provider from scratch.

AuthCon 2025 is a community-driven conference focused on Customer Identity and Access Management, taking place in New York City on May 14-15. It's designed for developers passionate about authentication, identity, and CIAM, offering a unique opportunity to connect with peers who face similar challenges. The event features sessions covering the hottest identity trends, real-world lessons from industry practitioners, expert support through FusionAuth's Genius Bar, and access to apidays NYC at no additional cost. By attending AuthCon 2025, developers will gain practical insights, emerging best practices, and new connections to drive their projects forward.