# Auth learning guides

Resources to help you get the most out of Kinde

## Overview

[Overview  
**Authentication guide**  
Ready to learn how to keep your company’s systems secure? Dive into our guide to authentication, including authentication types, factors and more.](/content/learn/authentication/overview/index.html)

## Types and methods

[Types and methods  
**Types and methods overview**  
Unsure which type of authentication is right for your platform? Discover everything you need to know about authentication types and methods.](/content/learn/authentication/types-and-methods/overview/index.html)

[Types and methods  
**Passwordless**  
Curious about exploring the benefits of passwordless authentication? Discover how passwordless works and how it stacks up to multi-factor authentication.](/content/learn/authentication/types-and-methods/passwordless-authentication/index.html)

[Types and methods  
**SSO**  
Thinking about using single sign-on in your app or company? Discover what you need to know about SSO authentication.](/content/learn/authentication/types-and-methods/guide-to-single-sign-on/index.html)

[Types and methods  
**ADFS**  
Wondering if Active Directory Federation Service (ADFS) is the right SSO solution for you? Discover why many businesses are moving away from this approach.](/content/learn/authentication/types-and-methods/active-directory-federation-service-adfs/index.html)

[Types and methods  
**MFA**  
Thinking about elevating your app or platform’s security? Discover how multi-factor authentication (MFA) can safeguard your systems.](/content/learn/authentication/types-and-methods/what-is-multifactor-authentication-mfa/index.html)

[Types and methods  
**JSON Web Tokens**  
Interested in learning more about JSON Web Tokens? From JWT structure to how they work, we reveal everything you need to know about this open standard.](/content/learn/authentication/types-and-methods/json-web-tokens/index.html)

[Types and methods  
**Refresh tokens**  
Are you using access tokens but looking to strengthen your platform security? Learn how refresh tokens can balance UX with data protection and security.](/content/learn/authentication/types-and-methods/how-to-use-refresh-tokens/index.html)

[Types and methods  
**SP vs IdP**  
Not sure about how SP-initiated SSO differs from IdP-initiated SSO? Discover what you need to know about these different approaches to SSO.](/content/learn/authentication/types-and-methods/sp-vs-idp-initiated-sso/index.html)

[Types and methods  
**JSON Web Key Sets**  
Want to learn how JSON Web Key Sets can boost the security of your app or platform? Here’s what you need to know.](/content/learn/authentication/types-and-methods/json-web-key-sets/index.html)

[Types and methods  
**JWT Claims**  
Curious about how JSON Web Token Claims work? Dive into the important elements of JWT Claims and the role they play in app security.](/content/learn/authentication/types-and-methods/json-web-token-claims/index.html)

[Types and methods  
**Token-based authentication**  
Curious about how token-based authentication works? Discover the different types of token-based authentication and the benefits of these methods.](/content/learn/authentication/types-and-methods/token-based-authentication/index.html)

[Types and methods  
**Social SSO**  
Thinking about using social logins in your app or platform? Discover the benefits of social logins for users and companies.](/content/learn/authentication/types-and-methods/social-logins/index.html)

## Protocols

[Protocols  
**Protocols overview**  
Trying to pick the right authentication protocol for your app, platform or team? Discover the most common types and which one could be best for you.](/content/learn/authentication/protocols/overview/index.html)

[Protocols  
**SAML**  
Curious about how SAML authentication works? Dive into our comprehensive guide for everything you need to know about SAML.](/content/learn/authentication/protocols/what-is-saml-authentication/index.html)

[Protocols  
**OAuth 2.0**  
Interested in how OAuth 2.0 works? Discover everything you need to know about the OAuth 2.0 authorization framework.](/content/learn/authentication/protocols/oauth-20/index.html)

[Protocols  
**OAuth 2.0 flows**  
Ready to learn how OAuth 2.0 flows work? Discover the key types of OAuth flows and how to pick the right flow for your app.](/content/learn/authentication/protocols/oauth-flows-explained/index.html)

[Protocols  
**OAuth 2.0 grant types**  
Unsure about which OAuth grant type is right for your platform? Discover what you need to know about picking the right OAuth grant type.](/content/learn/authentication/protocols/oauth-grant-types-explained/index.html)

[Protocols  
**Open ID Connect**  
Curious about how the Open ID Connect protocol works? Discover the benefits of OIDC and how it works for apps and developers.](/content/learn/authentication/protocols/open-id-connect-protocol-explained/index.html)

[Protocols  
**Kerberos**  
Wondering how Kerberos authentication works and whether it's right for your company? Dive into everything you need to know about this authentication protocol.](/content/learn/authentication/protocols/kerberos-authentication/index.html)

[Protocols  
**LDAP**  
Are you considering using Lightweight Directory Access Protocol (LDAP) in your company? Discover how this protocol works and its benefits.](/content/learn/authentication/protocols/lightweight-directory-access-protocol-ldap/index.html)

[Protocols  
**SAML vs OAuth**  
Want to understand the difference between SAML and OAuth 2.0? Discover how these open standards work hand in hand.](/content/learn/authentication/protocols/saml-vs-oauth-20/index.html)

## Identity

[Identity  
**Identity overview**  
Want to learn how Customer Identity and Access Management works? Discover the benefits of CIAM and how it compares to IAM.](/content/learn/authentication/identity/overview/index.html)

[Identity  
**Authentication vs Authorization**  
Curious about the difference between authentication and authorization? Discover the key differences between in this complete guide.](/content/learn/authentication/identity/authentication-vs-authorization/index.html)

[Identity  
**User management**  
Interested in SaaS user management? Discover everything you need to know about user management for SaaS tools and what solutions you can leverage.](/content/learn/authentication/identity/saas-user-management-solutions/index.html)

[Identity  
**Role-Based Access Control**  
Are you curious about how Role-Based Access Control works? Discover everything you need to know about RBAC and user permissions.](/content/learn/authentication/identity/role-based-access-control-rbac/index.html)

[Identity  
**Attribute-Based Access Control**  
Unsure if attribute-based access control is right for your company? Discover how ABAC stacks up against RBAC.](/content/learn/authentication/identity/attribute-based-access-control-abac/index.html)

[Identity  
**SCIM**  
Are you harnessing the power of SCIM Provisioning? Find out how the System for Cross-Domain Identity Management works and its benefits.](/content/learn/authentication/identity/scim-provisioning/index.html)

[Identity  
**Roles and permissions**  
Want to learn how user roles and permissions work in access management? Discover how to set your company up for success.](/content/learn/authentication/identity/users-roles-permissions-access-management/index.html)

[Identity  
**Access control models**  
Not sure which access control model is right for your company? Discover the five key types of access control models you need to know about.](/content/learn/authentication/identity/overview-access-control-models/index.html)

## Passwords

[Passwords  
**OTP vs HOTP vs TOTP**  
Curious about the difference between OTP, HOTP and TOTP? We dive into what each type of one-time password means and which could be best for your use case.](/content/learn/authentication/passwords/otp-hotp-totp/index.html)

[Passwords  
**Bcrypt**  
Looking to level up the security of your password storage? Learn how Bcrypt hashing can help you balance security and usability.](/content/learn/authentication/passwords/bcrypt-hashing-guide/index.html)

[Passwords  
**HMAC**  
Thinking about using Hash-Based Message Authentication Codes? Here’s what you need to know about using this message authentication method.](/content/learn/authentication/passwords/hash-based-message-authentication-codes-hmac/index.html)

[Passwords  
**Password hashing**  
Not sure how password hashing works? We reveal how password hashing and salting can work together to increase an app’s security.](/content/learn/authentication/passwords/password-hashing-salting/index.html)

## Security

[Security  
**API security**  
Looking for a comprehensive guide to API security? Dive into everything you need to know, including eight best practice recommendations.](/content/learn/authentication/security/api-security/index.html)