Meet Aembit IAM for Agentic AI. See what’s possible →

TRY AEMBIT

Blog

Best Practices

2-Legged vs 3-Legged OAuth: Which Flow Fits Your Use Case?

Ashur Kanoon Oct 2025 | 6 min read
2 legged vs 3 legged OAuth

6 min readLearn when to use 2-legged vs 3-legged OAuth flows for your authentication needs. Discover security vulnerabilities, implementation patterns, and how Workload Identity Federation eliminates credential risks.

Choosing the right flow is only the beginning. The real challenge is implementing either flow without creating persistent credential vulnerabilities that undermine your security.
Dig in
Best Practices

Configuring an MCP Server with Auth0 as the Authorization Server

Victor Ronin Sep 2025 | 4 min read
Best Practices

Securing AI Agents and LLM Workflows Without Secrets

Ashur Kanoon Sep 2025 | 10 min read
Resources

The Definitive Catch-Up Guide to Agentic AI Authentication

Victor Ronin Jul 2025 | 11 min read

Discover More of What Matters to You

Recent Stories

Announcing Aembit IAM for Agentic AI

Announcing Aembit IAM for Agentic AI

AI agents are accessing sensitive systems with little oversight. Aembit’s new IAM for Agentic AI gives security teams policy-based control, secretless access, and full auditability—built for the speed and scale of AI.
Apurva Davé
Oct 2025
|
7 min read
Attestation-based identity

​​Attestation-Based Identity: How It Works and Why It Matters

Instead of just trusting the token’s signature, attestation-based identity adds an extra layer of security.
Ashur Kanoon
Oct 2025
|
7 min read
OAuth vs OIDC

OAuth vs. OIDC: What’s the Difference and When Should You Use Each?

OAuth 2.0 and OIDC solve fundamentally different problems.
Ashur Kanoon
Oct 2025
|
5 min read
MCP Server Access

Auditing MCP Server Access and Usage

The dynamic nature of MCP makes a lack of visibility dangerous, as attackers can exploit complex workflows and ephemeral infrastructure to hide malicious activity.
Ashur Kanoon
Oct 2025
|
6 min read
MCP Security Introduction

What is MCP Security: A Complete Introduction

The Model Context Protocol (MCP), developed by Anthropic, standardizes how AI agents interact with external tools and data.
Dan Kaplan
Oct 2025
|
5 min read

Aembit Connects AI and Workload Access to AWS Secrets Manager

Aembit’s AWS Secrets Manager integration makes it easier to protect AI and workload access today – and evolve toward short-lived, policy-driven authentication.
Ashur Kanoon
Oct 2025
|
4 min read
Secrets Sprawl is Killing DevOps Speed — Here's How to Fix It

Secrets Sprawl is Killing DevOps Speed – Here’s How to Fix It

Secrets sprawl forces developers into constant rework while leaving organizations exposed to the exact security risks they’re trying to prevent.
Dan Kaplan
Oct 2025
|
5 min read
Simplifying IAM Migrations: Lessons for Hybrid Enterprises

Simplifying IAM Migrations: Lessons for Hybrid Enterprises

IAM migrations stall in hybrid enterprises due to massive on-prem Active Directory (AD) deployments, budget and regional constraints, and a lack of alignment among development, DevOps, and security teams.
Ashur Kanoon
Oct 2025
|
6 min read
Red Hat GitLab instance breach analysis with thumbnail of code on a laptop.

Red Hat’s GitLab Breach and the Cost of Embedded Credentials

The incident shows how repositories double as inadvertent credential stores, extending risk from vendors into customer environments.
Dan Kaplan
Oct 2025
|
3 min read
Aembit introduces CrowdStrike Next-Gen SIEM support.

Aembit Introduces CrowdStrike Next-Gen SIEM Support

Security teams can now correlate workload and agentic AI activity with broader enterprise telemetry, closing gaps before attackers exploit them.
Ashur Kanoon
Oct 2025
|
3 min read
The Evolution Toward Agentic AI

From Chatbots to Agents: The Evolution Toward Agentic AI

From rule-based chatbots to autonomous agentic AI, we’ve come a long way in past three decades.
Dan Kaplan
Oct 2025
|
8 min read
Securing Workloads with Conditional Access

Securing Workloads with Conditional Access: The Future of Dynamic Access Control

Conditional access enhances security and reduces the attack surface without adding friction.
Ashur Kanoon
Oct 2025
|
4 min read
Load More

Ready to Try Workload IAM?

Get started in minutes, with no sales calls required. Our free- forever tier is just a click away.

Request a Demo