Series navigation: Part 2 of 10 Previous: Part 1 taught the shape of a component and JSX. Next: Part 3 uses that interactivity to build forms, lists, and conditional screens. Version note: npm repo...
Series navigation: Part 1 of 10 Previous: Start here Next: Part 2 turns static components into interactive UI with state and events. Version note: npm reported react@19.2.6 while the official docs ...
Introduction: SSO Is a Travel System, Not a Button When a new programmer hears “implement SSO”, it is easy to imagine one magic button: Click login, go to Microsoft, come back, done. Real en...
Introduction: A Map for the Acronym Jungle After ten posts of enterprise SSO architecture, it is normal for a new programmer to feel overloaded. We talked about OAuth 2.0, OIDC, SAML, PKCE, JWKS, ...
Introduction: What Is This Post About? If you are new to the SSO world, you probably feel like you are drowning in a sea of acronyms: OIDC, SAML, PKCE, JWKS, DEK, KEK… It is overwhelming. This pos...
Introduction: If You Didn’t Log It, It Didn’t Happen In enterprise security, an event that isn’t logged is an event that never occurred. When a security incident happens—whether it’s a compromised...
Introduction: One Platform, Many Customers In Parts 1 through 8, we built a single-tenant SSO system—one application supporting one set of Identity Providers. But real-world SaaS platforms serve d...
Introduction: The Ticking Time Bomb Certificates expire. Keys get compromised. IdPs rotate their signing credentials on a regular schedule—typically every 1-2 years for SAML X.509 certificates, an...
Introduction: When the IdP Pulls the Plug In Part 6, we covered SP-Initiated Logout—where the user actively clicks “Logout” in our application. But what happens when an IT administrator clicks “Re...
Introduction: The Difficulty of Leaving Logging a user in via SSO is only half the battle. In an enterprise environment, logging them out correctly is arguably more critical. If a user clicks “Log...