Ory Blog & Articles

How to reconcile data privacy regulation with a global IAM network?

Discover why I chose to join Ory and how its fresh approach to IAM is revolutionizing the industry.

Learn how to set up and deploy Ory Oathkeeper as an AWS Lambda authorizer, giving you full control over your UI and providing a seamless user experience.

Experienced enterprise security leader Jeff Kukowski joins Ory as CEO and new funding comes from Insight Partners and Balderton Capital.

Choose the right solution for your identity and access management needs with our guide to Ory Network and self-hosting.

Ory has listened to your feedback and made changes to the pricing structure. Review our new transparent and accessible pricing plan.

In this guide, you will set up a hardened, fully functional OAuth2 Server and OpenID Connect provider using open source only. It will take you about ~10 minutes. We will use Ory Hydra (open source), a security-first OAuth2 and OpenID Connect server written in Golang.

Join us as we look back on the Ory Summit 2023 and explore the key takeaways and insights from the event.

Ory has completed its SOC 2 Type 2 attestation. Here's what it means for you.

Ever wanted to know why managing your own user identity and access management solution yourself drains resources and skyrockets costs? Uncover the hidden challenges and pitfalls of a DIY identity solution.

Learn why Ory built a multi-region identity and access management (IAM) that is globally available, fast, and compliant with data privacy laws.

Ory open source support policy to better serve businesses and community members

Unlock the power of single sign-on with our comprehensive tutorial on deploying an enterprise-grade OAuth2 server using open-source tools, empowering you to centralize authentication and enhance security with ease.

Performing over 1000 OAuth2 Authorization Code Grants per second on a single PostgreSQL database

Elevating Your Ory Administration Experience

Boost Your User Management and Authentication with Ory Kratos 1.0: Discover the Latest Release

Enhance your application's performance and scalability with Ory Network Edge Sessions. Discover how Ory Network can help you streamline access control with optimal efficiency.

Nobody likes cookie banners, nor non-essential cookies. So let's change that!

Breached password detection is an automated strategic solution to prevent leaked credentials from being used. Learn how to protect your users and business from password threats.

Hop-by-hop header vulnerability in go standard library reverse proxy description and how to fix it

Our Commitment to Protecting Your Data and Privacy.

In this step-by-step guide, discover how to effectively use Ory with Cloudflare Workers to optimize your application's performance.

Explore the latest authentication methods and their benefits and drawbacks in this in-depth article. This article provides valuable insights into how to secure your online services with strong authentication mechanisms.

Learn how to save money and improve customer value using Ory.

The Ory Permission Language is a language that allows configuring Ory Keto.

The Ory SDKs are now released as version 1.0!

We built login and account management, so you don’t have to.

A global network for end-to-end security

A new milestone for Ory Hydra, the OpenID Certified OAuth 2.0 and OpenID Connect Server.

Customize email templates for all out-of-band communication. With code examples!

Was your authentication portal breached by some unknown hacker? You may not be alone. Here is an overview of the most common attack vectors against authentication services.

Replace legacy identity infrastructure IdentityServer with modern, cloud-native, and scalable open source services by Ory. Read more about the implementation of an IdentityServer alternative here.

Add login, registration, user and profile management to Django applications in minutes using the Ory Kratos open source project.

Learn how to migrate build a URL shortener using the Ory Kratos and Supabase open source projects. Includes code examples for Go and Docker!

Ory’s flagship zero trust network “Ory Network” is a global, scalable and secure platform for managing identities and its distribution across various internet services.

Build a social network to share side projects and explore what other studends are making, using open source software and Ory Kratos for authentication.

Learn how to build a URL shortener using the Ory Kratos and Supabase open source projects. Includes code examples for Nuxt and Tailwind CSS!

Build scalable and secure zero trust microservice architecture using open source components from Ory and Kong.

Do I need authentication or authorization? Do I require a session? Is a session a cookie or a token? Do I require JWTs or Cookies?

Learn how to build a URL shortener using the Ory Kratos and Supabase open source projects. Includes code examples for Go and Docker!

In this article we'll show you a cost effective way to build bots for Slack

How Vadosware built LoginWithHN, an OAuth2+OpenID Connect provider for HackerNews using the Ory Hydra open source project.

Add login, registration, user and profile management to Flutter web applications in minutes using the Ory Kratos open source project. Includes code examples for Dart!

Securing your flask application with open source solutions

Use hardware tokens like Yubikey to secure Ory Network admin accounts.

OAuth2.0 for Ory Network is coming

Practical steps and tips for organizing a conference for your community, focused on developer and open source communities.

Adding OAuth2 / OpenID Connect to your application is a complex process. This article will help you understand why you do not need OAuth2 / OpenID Connect in most cases!

This article is a company announcement that informs about the Series A investment.

The log4j vulnerability sparked a new discussion about open source maintainership and how it can be improved. This article summarizes the discussion and shows how Ory is addressing the problem.

A distillation of the key beliefs that underpin Ory as an organization.

Build custom login, registration, user settings, password recovery, email and phone verification pages to your Next.js React Single Page Application (SPA) using the ORY Kratos open source project. Includes code examples for TypeScript and Docker, and end-to-end tests!

Add login, registration, user and profile management to Next.js Single Page Applications in minutes using the ORY Kratos open source project. Includes code examples for TypeScript and Docker, and end-to-end tests!

Learn how to your existing node.js backend with the Ory Network, business model and data architecture.

This is an example of integrating the Ory Network with a Flutter frontend.

Add login, registration, user, and profile management to React Native mobile and desktop apps using the Ory Kratos open source project. Includes code examples for TypeScript and Docker!

A hands-on example of Ory Keto based on a real use case. Try out the capabilities of an open source implementation of the Google Zanzibar authorization system with code examples!

This article discusses the pioneering efforts by Ory to build the open source implementation of Google Zanzibar called Ory Keto. It will outline the motivation, challenges and concepts of building a global, low latency consistent access control system.

This article gives a short introduction to Dockertest and how Google is using it against Covid19, also an overview about the open-source virus response in general.

Pick recommended Argon2 (Argon2id, Argon2i) parameters (iteration, memory, parallelism) for secure login and password hashing, following security best practices using only open source.

Run ORY Kratos as a serverless service on Kubernetes and Knative with scale-to-zero deployments.

A short introduction into modern application architecture and Ory's thinking and philosophy around software development.

Learn how to test SQL migrations in any environment. This guide will point out all the considerations we at ORY make when implementing SQL migration tests for our open source products.

We are very excited to announce the 1.0 release of ORY Hydra!

Read this guide to learn how to implement authentication and authorization for mobile, browser, and native apps with better user experience and buffed security.

Applications that implement a "Sign in with ..." flow must not use a mutable identifier to match external users to the internal user management system. Several web applications implementing "Sign in with GitHub" have been found to be vulnerable to this.

Control access to your APIs with cloud native ORY Oathkeeper and the Ambassador Reverse Proxy on Kubernetes.

This is the first blog post of a multi-part series about control on the web. The goal of this series is to be the go-to guide for anyone that needs help with setting up access control (authentication & authorization) for their web application.

Get accurate Golang (Go) code coverage reports using go-acc. Your test might perform better than you think!