One post tagged with "governance"

Most companies don't have an OIDC problem because nobody understands OpenID Connect. They have one because nobody ever wrote down the decisions: which provider, which apps, who owns the credentials, how long a secret should live, what happens when someone forgets to rotate one. The protocol is standardized. Your organization's choices around it are not, until you write them down.