IBM Security Verify

Welcome to the IBM Security Verify Community, where product users and IBMers can come together to discuss and overcome challenges related to identity and access management (IAM). The IBM IAM portfolio continues to modernize and scale to provide the industry’s most comprehensive solutions across access management, consumer identity, authentication, identity governance and privileged access management. To raise visibility of our portfolio, we are excited to unify under a new single brand name: IBM Security Verify. 

The heart of our mission is to provide smart identity for the hybrid multicloud world. You will gradually see our IAM products rebrand in the coming months, coupled with new capability. We hope you leverage this community to learn from fellow users of IBM Security Verify products and share your own use cases and best practices so that others may benefit from your experience.

We encourage you to take full advantage of the resources available in this group. Exclusive technical webinars, demos, how-to blogs and other additional resources will help you expand your knowledge of what’s new within the portfolio. We will also keep you up to date regarding product enhancements and regional/virtual user group meetings. Please contact support@communitysite.ibm.com with any questions or feedback.

IAM Resources

Latest Discussions

  • Profile Picture

    RE: OAuth Device authorization code flow and id_token ...

    By: Dries Eestermans , an hour ago

    Hi @André Leruitte , You would not necessarily use it as an "access token" but rather inject it as an "id_token" in the response (some PoC code I made back then, not sure if it still works): if (request_type == "access_token" && grant_type == "urn:ietf:params:oauth:grant-type:device_code") ...

  • Profile Picture

    RE: Kubernetes -- Reverse Proxy and Ingress odditi ...

    By: Serge Vereecke , 2 hours ago

    Hello Anders, Not sure if you are using a K8s cluster on a public cloud provider or on bare metal ? You will need to use HTTPS from the client to the loadbalancer and from the load balancer to the service object (WebSEAL). nginx.ingress.kubernetes.io/backend-protocol: ...

  • Profile Picture

    RE: OAuth Device authorization code flow and id_token ...

    By: Peter Volckaert , 3 hours ago

    Hi, Hybrid flows are defined by OIDC and are valid for two types of flows: the "implicit flow" and the "authorization code" flow. See this link: https://openid.net/specs/openid-connect-core-1_0.html#HybridFlowAuth. The flow and the tokens exchanged are ...

Latest Blogs

  • Profile Picture

    Gaining Deeper Identity Insights to Be Able to Make Better Access Decisions

    By: Katherine Cola yesterday

    Just because a user presents an accurate user name, password, IP and geolocation does not mean the user is legitimate. The harsh fact is that today's IAM systems are based on a time-worn — maybe worn out? — static approach to assessing risk. The static ...

    1 person recommends this.
  • Profile Picture

    Extend user attribute management in Verify for complex use cases with IBM Cloud Functions

    By: Adam Case 13 days ago

    It is very unlikely that user repositories, such as Active Directory or Security Directory Server, will contain all data associated with the user. It is also less likely that these directories have the data in the right format that applications expect. ...

    2 people recommend this.
  • Profile Picture

    Secret Server is now IBM Security Verify Privilege Vault! Announcing 10.9 Release

    By: MRINALINI RANJAN 29 days ago

    IBM Security Secret Server (On-Premises & SaaS ) is now officially IBM Security Verify Privilege Vault , and IBM Security Privilege Manager is now IBM Security Verify Privilege Manager ! This is part of our continued efforts to unite under ...

    1 person recommends this.
  • Profile Picture

    Adopting modernized identity governance in a hybrid world

    By: MRINALINI RANJAN one month ago

    Co-Authored by Erika Weiler. With today’s complex IT requirements, organizations often craft a hybrid multicloud environment with applications living on-premises, in a private cloud and as software-as-a-service (SaaS). This has made it difficult ...

  • Profile Picture

    ADFS 3.0 Step-by-Step Guide: Federation with IBM Security Verify Access

    By: Haan Ming Lim one month ago

    Abstract This documentation provides instructions to configure a basic identity federation deployment between Microsoft® Active Directory® Federation Services 3.0 (AD FS 3.0) and IBM Security Verify Access by using the SAML 2.0 protocol, specifically ...

Latest Files

Upcoming Events