January 2022 Summaries

Multi-factor authentication on the Ory Network enhances account security even if credentials are compromised, offering two second-factor options: an Authenticator App or a Hardware Token like the Yubikey. Authenticator Apps generate time-sensitive codes on devices, while Hardware Tokens like Yubikeys store cryptographic keys for generating one-time passwords, supporting various authentication methods under FIDO2 standards, including WebAuthentication and CTAP protocols. The guide outlines a straightforward process for integrating a Yubikey with an Ory Network account, involving logging into the platform, naming and adding the security key, and activating the Yubikey by touching it when prompted. Once set up, users log in with their credentials and complete the second authentication step by connecting and activating the Yubikey, thereby ensuring enhanced security for their Ory Network project.

Ory Hydra is progressing towards its 2.0 release, which will introduce OAuth2.0 and OIDC APIs to the Ory Network with minimal breaking changes while enhancing performance and data management for large workloads. The latest release, Ory Hydra 1.11.0, includes significant community-driven improvements such as support for loading keys from Hardware Security Modules (HSMs) and native support for OpenID Connect Dynamic Client Registration and OAuth2 Dynamic Client Registration Protocols. Additionally, there is an improved integration API for the JWT profile for OAuth 2.0 authorization grants, facilitating easier integration for various devices and applications. The update also includes expanded support for ARM64 platforms, such as Apple M1 and FreeBSD, and resolves a configuration loading bug to simplify the use of complex configuration keys from environment variables. Users are encouraged to stay updated with developments through the Ory newsletter and Twitter.

Ory successfully hosted its inaugural Ory Summit 2021, a two-day virtual event bringing together developers to explore the use of Ory's open-source identity infrastructure products. Despite limited resources, the event was executed with efficiency, offering presentations that can be rewatched online. The summit aimed to strengthen the Ory Developer Community by facilitating dialogue and idea exchange, with sessions that included talks, workshops, and Q&A panels. Key strategies for organizing such events included understanding the audience, ensuring robust internet connectivity, employing simple and effective tech stacks like YouTube for streaming and Slack for communication, and maintaining a backup plan for unforeseen circumstances. The event emphasized the importance of preparation through dry runs, effective promotion, and post-event analysis. The Ory team plans to build on this success with the Ory Summit 2022, potentially allowing for in-person attendance, while focusing on inclusivity, improved content diversity, and more interactive sessions.