samantha-murphy

Samantha Murphy is a Principal Product Marketing Manager for Okta. She leads the Customer Identity Security portfolio, driving go-to-market strategy, messaging, launches, and strategic growth initiatives. Before Okta, Sam spent over six years in product management roles in Identity and Access Management.

She holds a Bachelor of Commerce degree from Queen’s Smith School of Business and is from Ottawa, Canada.

In her free time, Sam makes the most of winter by playing an awesome ice skating sport called ringette.

Principal Product Marketing Manager, Customer Identity

Samantha Murphy

milan-khan

Milan is the Product Manager for advanced identity security features for customers operating in highly regulated industries. Milan is especially keen on solving consumer identity problems balancing user experience, security and compliance.

Senior Product Manager

Milan Khan

Learn how to improve end-to-end security and privacy for your APIs using the FAPI 2.0 Security Profile.  

FAPI 2.0: The Future of API Security for High-Stakes Customer Interactions

auziros:jeana-tahnk

Jeana has been in the tech industry for 15+ years, both as a communications professional and writer. As Director of Global Communications at Auth0, she works with her internal team and external agencies to amplify the company's visibility worldwide and establish its leadership in the identity industry. When she is not working, she can most likely be found on a field watching one of her three kids playing sports, or cleaning up after her one-year-old retriever who chews everything.

Senior Director, Global Communications

Jeana Tahnk

Highly-rated identity specifications and trends podcast concludes season one; season two to launch in January 2021



**BELLEVUE, Wash. – Dec. 17, 2020 –** The [Auth0](https://auth0.com/) Identity Platform, a product unit within Okta, today announced that the [OpenID Foundation](https://openid.net/foundation/) will be the exclusive sponsor for season two of Auth0's flagship podcast ['Identity, Unlocked,'](https://identityunlocked.auth0.com/public/49/Identity%2C-Unlocked.--bed7fada/025d70b9?utm_source=podcast&utm_medium=pr&utm_campaign=identity-unlocked) scheduled to release in January 2021. Auth0 and the OpenID Foundation will bring their shared goals around promoting awareness, understanding, and adoption of open identity standards to the podcast in an effort to make identity more accessible.

Hosted by Vittorio Bertocci, identity expert and principal architect at Auth0, 'Identity, Unlocked' features conversations with identity thought leaders and explores the latest specifications and trends from a developer's perspective, making identity more accessible to everyone. [Season one](https://auth0.com/blog/auth0-launches-identity-unlocked-the-identity-podcast-for-developers/) recently concluded and featured interviews with industry standards experts and identity thought leaders, including Brian Campbell, Dick Hardt, Pamela Dingle, and many others. 

Season two of 'Identity, Unlocked' will explore OpenID Connect specifications such as Financial-grade API (FAPI), Self-issued OpenID Connect (SIOP), and eKYC and Identity Assurance (IDA) to compliment the show's history of interviewing those directly involved in the creation of identity standards. In addition to the OpenID Connect specifications, 'Identity, Unlocked' will continue to explore various specifications and trends across the identity industry.

"Our hope is that the OpenID Foundation's sponsorship of the Auth0' Identity Unlocked' podcast will encourage further deep and diverse technical contributions to the open identity standards the Foundation has developed," said Don Thibeau, OpenID Foundation Executive Director. "This podcast will continue to educate and introduce a global community of contributors to working groups like the Financial-grade API (FAPI), eKYC-IDA, and others. The deep dive into these technologies on 'Identity Unlocked' is a priority for the OpenID Foundation and a unique resource for open standards development in 2021."

"Thank you to everyone involved in 'Identity, Unlocked' season one—we are grateful for the positive response we received during season one, and we look forward to collaborating on the second season in partnership with OpenID Foundation," said Martin Gontovnikas, SVP of Marketing and Growth at Auth0. "Open identity standards are of critical importance, and it is our goal to make identity more accessible to everyone, in an inclusive way."

To learn more about 'Identity, Unlocked,' visit [identityunlocked.com](http://identityunlocked.com/). To subscribe to the latest podcast updates and episodes, visit [Apple Podcasts](https://podcasts.apple.com/us/podcast/identity-unlocked/id1529010471) and [Spotify](https://open.spotify.com/show/1Y6XBZcVK45QijvV0o7RVs). 

## About Vittorio Bertocci

[Vittorio Bertocci](https://auth0.com/blog/authors/vittorio-bertocci/) is Principal Architect at Auth0 and applies his vast knowledge of the identity industry to Auth0 in all aspects of the company, including internal and external education, product innovation, and customer integration. Prior to Auth0, Bertocci spent 17 years at Microsoft, where he worked on the Azure Active Directory team and focused largely on improving the developer experience. As a published author of four identity books and a highly-trafficked blog: cloudidentity.com, his forward-thinking commentary has enabled him to speak at conferences, such as Identiverse, BUILD, PDC, TechEd, Cloud Identity Summit, and many other industry events around the world.

<include src="asides/AboutAuth0" />

### Media Contacts
Auth0 Global Communications <br />
[press@auth0.com](mailto:press@auth0.com) <br />
 
Matter for Auth0  <br />
[auth0@matternow.com](mailto:auth0@matternow.com)  <br />


OpenID Foundation to Sponsor Auth0's Identity, Unlocked Podcast

2b7b341132c3df90155a9914f13b6deb

Former Auth0 Employee

Zach Walchuk

Why the OpenID Foundation's open letter to Apple might not matter for your applications.



Last week, the OpenID Foundation posted an [open letter to Apple](https://openid.net/2019/06/27/open-letter-from-the-openid-foundation-to-apple-regarding-sign-in-with-apple/), encouraging them to bring the recently announced Sign In with Apple login feature in line with the [OpenID Connect (OIDC) protocol](https://auth0.com/resources/ebooks/the-openid-connect-handbook?ref=blog). As we pointed out when it was first announced, [Sign In with Apple](https://auth0.com/blog/what-is-sign-in-with-apple-a-new-identity-provider/) aligns with some of the requirements laid out in the OIDC and [OAuth 2.0](https://tools.ietf.org/html/rfc6749) specifications, but Apple makes little mention of these standards in their official documentation.

<include src="ebook-ads/OidcHandbook" />

![OpenID Foundation and Apple logo illustration](https://images.ctfassets.net/23aumh6u8s0i/47vwPJFYvPU0hM9s7rMakE/a5f080fb33d7c3e95d9a7b40aa1eefd5/apple-oidc)

The letter from the OpenID Foundation was [accompanied by a document](https://bitbucket.org/openid/connect/src/default/How-Sign-in-with-Apple-differs-from-OpenID-Connect.md) outlining where Sign In with Apple differs from the OIDC specification. This document, drafted by the OpenID Foundation’s Certification team and other members of the identity community (including Filip Skokan, an engineer at Auth0), calls out the OIDC spec violations that increase the risk of attacks and privacy concerns, as well as additional peculiarities that will make it difficult for developers to incorporate Sign In with Apple into their existing applications.

## What This Means For Application Developers

While Sign In with Apple is still very much under development and a number of significant changes can be expected, a lot of attention is being paid to the implementation specifics even at this early stage. This is largely due to the fact that Apple will require the Sign In with Apple option for all applications in their ecosystem that support third-party logins. A new identity provider that complies with established standards could greatly reduce the burden on application developers, as many applications are already set up to handle similar connections that do follow the standards.

Of course, Apple may choose not to align with the OIDC specification for any number of reasons related to their goals and requirements as a hardware and software provider. Identity and access management is not a core product for Apple, and establishing interoperability with systems outside of their ecosystem may very well not be a high priority. As with any identity solution tightly coupled with a company’s other software, features that benefit general use may only be put into place when they overlap with the specific requirements of operating within that company’s primary offerings. But interoperability is not the only concern addressed in the OpenID Foundation’s letter — it remains to be seen how Apple will address the attack surface exposed by not complying with parts of the specifications that deal with preventing known attacks.

## Managing Discrepancies with an Independent Identity Platform

Independent identity platforms, focused solely on [identity and access management](https://auth0.com/blog/identity-as-a-service-in-2018/), do not run into these same issues with competing priorities. It is in their best interest, and the interests of their users, to connect as easily and widely with other systems as possible. At Auth0, we provide simple configuration options to set up a variety of [social](https://auth0.com/docs/identityproviders#social) and [enterprise](https://auth0.com/docs/identityproviders#enterprise) connections that follow the standards established by OIDC and OAuth 2.0, SAML, WS-Federation, and many others. For those connections that don’t entirely comply with specifications, we work to bridge the gaps by implementing the best options the providers offer and adding measures where we can to harden against attacks. And while we continue to be active in the identity community to encourage the adoption of recognized standards, the Auth0 platform is built to address and keep up with any differences, so that application developers can be free from worrying about changes that might affect their code.

Because Auth0 is a [certified OpenID provider](https://openid.net/certification/), you know what to expect when connecting with our platform. Any application already supporting an OIDC-compliant provider is already set up to quickly integrate with Auth0 and connect to a vast array of identity providers by simply turning on a few switches. And with our [collection of SDKs](https://auth0.com/docs/libraries#sdk-repositories-and-support-status) across multiple languages, it’s easy to secure any application with Auth0 without having to worry about implementation details.

## Aside: Try Sign In with Apple on Auth0 Today

Auth0's beta support of Sign In with Apple makes it easy to get started:

* <a href="https://auth0.com/signup" data-amp-replace="CLIENT_ID" data-amp-addparams="anonId=CLIENT_ID(cid-scope-cookie-fallback-name)">Sign up for an Auth0 account.</a>
* Use the [QuickStart](https://auth0.com/docs/quickstarts) of your choice to integrate Auth0 into your application, or start from scratch and have a secure app deployed in minutes.
* Add Sign In with Apple under “Connections” > “Social”, and test with Auth0's developer credentials.

![Auth0 Dashboard - Social Connections with Sign In with Apple included](https://images.ctfassets.net/23aumh6u8s0i/3rMC0k1THr4rYHnQ22y2zx/891a90db2e67aed1b0e233a26713139b/social-connections)


"openid foundation"