# Blog Discussions
**URL:** https://community.auth0.com/c/blog-discuss/56.md?no_subcategories=false&page=1
[Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md)
**Page:** 2
---
## [Secure a .NET RAG System with Auth0 FGA](https://community.auth0.com/t/secure-a-net-rag-system-with-auth0-fga/192644)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [October 1, 2025, 12:50pm UTC](https://community.auth0.com/t/secure-a-net-rag-system-with-auth0-fga/192644 "2025-10-01T12:50:26Z")
This blog post shows youhow to secure an AI chatbot built with .NET Blazor using the RAG pattern and make sure that users can only access information from documents they have permission to view.
---
## [Implementing DPoP with Auth0](https://community.auth0.com/t/implementing-dpop-with-auth0/192078)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [September 18, 2025, 1:00pm UTC](https://community.auth0.com/t/implementing-dpop-with-auth0/192078 "2025-09-18T13:00:38Z")
Learn how easily you can add DPoP support to your applications using the Auth0 SDKs. Read more
---
## [How SAML Authentication Works](https://community.auth0.com/t/how-saml-authentication-works/191839)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [September 12, 2025, 4:51pm UTC](https://community.auth0.com/t/how-saml-authentication-works/191839 "2025-09-12T16:51:14Z")
Have you always wanted to know what SAML is and how it works? This article is for you.
---
## [Earn Customer Trust in the AI Era: A Guide for Businesses](https://community.auth0.com/t/earn-customer-trust-in-the-ai-era-a-guide-for-businesses/190527)
**Author:** [@jesstemporal](https://community.auth0.com/u/jesstemporal)\
**Replies:** 2\
**Last updated:** [September 9, 2025, 12:26pm UTC](https://community.auth0.com/t/earn-customer-trust-in-the-ai-era-a-guide-for-businesses/190527 "2025-09-09T12:26:23Z")
Learn how to build trust with a security-first approach, transparency, and human oversight to unlock AI’s full potential. Brought to you by Anika Jang. Read it here…
---
## [Dealing With Non-Human Identities](https://community.auth0.com/t/dealing-with-non-human-identities/191634)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [September 9, 2025, 9:11am UTC](https://community.auth0.com/t/dealing-with-non-human-identities/191634 "2025-09-09T09:11:52Z")
“Isn’t Non-Human Identities just a fancy new name for machine identities, service accounts, or application identities?” You’re not wrong—they are all part of the same family. But the term “Non-Human Identity” highlights …
---
## [How to Configure the Auth0 MCP Server in VS Code for AI Assistant Integration](https://community.auth0.com/t/how-to-configure-the-auth0-mcp-server-in-vs-code-for-ai-assistant-integration/191613)
**Author:** [@jesstemporal](https://community.auth0.com/u/jesstemporal)\
**Replies:** 1\
**Last updated:** [September 8, 2025, 9:36pm UTC](https://community.auth0.com/t/how-to-configure-the-auth0-mcp-server-in-vs-code-for-ai-assistant-integration/191613 "2025-09-08T21:36:01Z")
Learn how to set up and configure the Auth0 MCP Server in VS Code. This blog post provides step-by-step instructions for AI assistant integration, allowing you to analyze logs and manage your identity infrastructure dire…
---
## [Fine-Grained Authorization in ASP.NET Core with Auth0 FGA](https://community.auth0.com/t/fine-grained-authorization-in-asp-net-core-with-auth0-fga/191501)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [September 5, 2025, 9:37am UTC](https://community.auth0.com/t/fine-grained-authorization-in-asp-net-core-with-auth0-fga/191501 "2025-09-05T09:37:12Z")
Learn how to enhance authorization control in ASP.NET Core using Auth0’s Fine-Grained Authorization (FGA).
---
## [API Keys and AI Agents: Four Common Risks](https://community.auth0.com/t/api-keys-and-ai-agents-four-common-risks/191400)
**Author:** [@JennJ](https://community.auth0.com/u/JennJ)\
**Replies:** 0\
**Last updated:** [September 2, 2025, 7:00pm UTC](https://community.auth0.com/t/api-keys-and-ai-agents-four-common-risks/191400 "2025-09-02T19:00:14Z")
Building powerful AI agents means connecting them to third-party APIs, but just pasting in API keys is a recipe for disaster. Dive into four unique security risks and how to solve for them with Auth0’s Token Vault. Brou…
---
## [How to Build a Python MCP Server to Consult a Knowledge Base](https://community.auth0.com/t/how-to-build-a-python-mcp-server-to-consult-a-knowledge-base/191211)
**Author:** [@jesstemporal](https://community.auth0.com/u/jesstemporal)\
**Replies:** 1\
**Last updated:** [August 28, 2025, 1:31pm UTC](https://community.auth0.com/t/how-to-build-a-python-mcp-server-to-consult-a-knowledge-base/191211 "2025-08-28T13:31:07Z")
Turn a blog into a searchable knowledge base for your AI assistant. Follow this step-by-step guide to build a local MCP server in Python, giving an MCP client the ability to interact with a blog without you ever having t…
---
## [Protect Your Access Tokens with DPoP (Demonstrating Proof of Possession)](https://community.auth0.com/t/protect-your-access-tokens-with-dpop-demonstrating-proof-of-possession/191057)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [August 25, 2025, 7:35am UTC](https://community.auth0.com/t/protect-your-access-tokens-with-dpop-demonstrating-proof-of-possession/191057 "2025-08-25T07:35:55Z")
Did you know you can bind an access token to the client application, improving its security? DPoP allows you to do this. Read more here.
---
## [Secure and Deploy Remote MCP Servers with Auth0 and Cloudflare](https://community.auth0.com/t/secure-and-deploy-remote-mcp-servers-with-auth0-and-cloudflare/185336)
**Author:** [@robertino.calcaterra](https://community.auth0.com/u/robertino.calcaterra)\
**Replies:** 5\
**Last updated:** [August 22, 2025, 2:00am UTC](https://community.auth0.com/t/secure-and-deploy-remote-mcp-servers-with-auth0-and-cloudflare/185336 "2025-08-22T02:00:12Z")
Learn how to use Auth0 to secure a remote MCP server built with Cloudflare Workers to access a protected API. Read more… :writing\_hand:t2: Brought to you by @jesstemporal and @william.johnson
---
## [Anatomy of an OAuth 2.0 Authorization Request](https://community.auth0.com/t/anatomy-of-an-oauth-2-0-authorization-request/189540)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 3\
**Last updated:** [August 18, 2025, 2:11pm UTC](https://community.auth0.com/t/anatomy-of-an-oauth-2-0-authorization-request/189540 "2025-08-18T14:11:13Z")
Have you ever wondered what all those parameters that make up an OAuth 2.0 or OpenID Connect authorization request mean? This article explains all the details of the core parameters and some of the most common ones you …
---
## [An Introduction to MCP and Authorization](https://community.auth0.com/t/an-introduction-to-mcp-and-authorization/185130)
**Author:** [@robertino.calcaterra](https://community.auth0.com/u/robertino.calcaterra)\
**Replies:** 6\
**Last updated:** [August 13, 2025, 5:46pm UTC](https://community.auth0.com/t/an-introduction-to-mcp-and-authorization/185130 "2025-08-13T17:46:48Z")
Discover the Model Context Protocol (MCP) and its authorization mechanisms. Learn how to use API keys, OAuth 2.1 implementation, and best practices for secure LLM API connections. Read more… :writing\_hand:t2: Brought t…
---
## [Access Control in the Era of AI Agents](https://community.auth0.com/t/access-control-in-the-era-of-ai-agents/190570)
**Author:** [@jesstemporal](https://community.auth0.com/u/jesstemporal)\
**Replies:** 0\
**Last updated:** [August 13, 2025, 2:46pm UTC](https://community.auth0.com/t/access-control-in-the-era-of-ai-agents/190570 "2025-08-13T14:46:51Z")
Learn about the history of AI agents, the risks they introduce and how to prevent them with a focus on fine-grained access control in this blog post by @carlastabile .
---
## [Auth0 Product Updates (July 2025): New Security Features, Global Regions, and Developer Previews](https://community.auth0.com/t/auth0-product-updates-july-2025-new-security-features-global-regions-and-developer-previews/190526)
**Author:** [@jesstemporal](https://community.auth0.com/u/jesstemporal)\
**Replies:** 0\
**Last updated:** [August 12, 2025, 2:56pm UTC](https://community.auth0.com/t/auth0-product-updates-july-2025-new-security-features-global-regions-and-developer-previews/190526 "2025-08-12T14:56:03Z")
Enhanced developer security with PII masking in logs and improved bot detection, new global cloud regions, early access programs for Multiple Custom Domains, Passkey support, and more developer-focused features. Read al…
---
## [Why Can't I Just Use an API? Because Your AI Agent Needs MCP](https://community.auth0.com/t/why-cant-i-just-use-an-api-because-your-ai-agent-needs-mcp/190465)
**Author:** [@jesstemporal](https://community.auth0.com/u/jesstemporal)\
**Replies:** 0\
**Last updated:** [August 11, 2025, 8:32pm UTC](https://community.auth0.com/t/why-cant-i-just-use-an-api-because-your-ai-agent-needs-mcp/190465 "2025-08-11T20:32:17Z")
This post explores why traditional APIs are insufficient for AI agents. It highlights how MCP resolves issues like excessive choices and manual translation, while also addressing new security considerations for agent-bas…
---
## [Secure LangChain Tool Calling with Python, FastAPI, and Auth0 Authentication](https://community.auth0.com/t/secure-langchain-tool-calling-with-python-fastapi-and-auth0-authentication/190378)
**Author:** [@jesstemporal](https://community.auth0.com/u/jesstemporal)\
**Replies:** 0\
**Last updated:** [August 8, 2025, 8:38pm UTC](https://community.auth0.com/t/secure-langchain-tool-calling-with-python-fastapi-and-auth0-authentication/190378 "2025-08-08T20:38:07Z")
Learn how to build a secure tool-calling AI agent using LangChain, FastAPI, and Python. You’ll learn how to protect a FastAPI API with Auth0 and to implement agent frontend that uses LangChain tool calling to interact wi…
---
## [Five Myths About JWTs Debunked](https://community.auth0.com/t/five-myths-about-jwts-debunked/190296)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [August 7, 2025, 10:13am UTC](https://community.auth0.com/t/five-myths-about-jwts-debunked/190296 "2025-08-07T10:13:54Z")
There are many myths surrounding JSON Web Tokens. This article attempts to debunk five of them. Check them out!
---
## [Build an AI Assistant with LangGraph and Next.js: Use Your APIs and Google Calendar as Tools](https://community.auth0.com/t/build-an-ai-assistant-with-langgraph-and-next-js-use-your-apis-and-google-calendar-as-tools/189940)
**Author:** [@jesstemporal](https://community.auth0.com/u/jesstemporal)\
**Replies:** 0\
**Last updated:** [July 30, 2025, 7:56pm UTC](https://community.auth0.com/t/build-an-ai-assistant-with-langgraph-and-next-js-use-your-apis-and-google-calendar-as-tools/189940 "2025-07-30T19:56:52Z")
Learn how to build a tool-calling AI agent using LangGraph, Next.js, and Auth0. Integrate your own API as tools. Use Google services like Gmail and Calendar as tools secured using Auth0 Token Vault. This is the part 3 o…
---
## [OAuth 2.0 Access Tokens and the Principle of Least Privilege](https://community.auth0.com/t/oauth-2-0-access-tokens-and-the-principle-of-least-privilege/189310)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [July 17, 2025, 10:43am UTC](https://community.auth0.com/t/oauth-2-0-access-tokens-and-the-principle-of-least-privilege/189310 "2025-07-17T10:43:23Z")
How can you apply the Principle of Least Privilege when using OAuth 2.0 access tokens to protect your applications? Learn more through this blog post.
---
## [User Onboarding Strategies in a B2B SaaS Application](https://community.auth0.com/t/user-onboarding-strategies-in-a-b2b-saas-application/189158)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [July 14, 2025, 1:12pm UTC](https://community.auth0.com/t/user-onboarding-strategies-in-a-b2b-saas-application/189158 "2025-07-14T13:12:39Z")
Learn the strategies for onboarding users in a B2B SaaS application and take a look at a simple Blazor implementation based on invitations. Read on
---
## [B2B SaaS Identity Challenges: Customization and Extensibility](https://community.auth0.com/t/b2b-saas-identity-challenges-customization-and-extensibility/188767)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [July 4, 2025, 2:15pm UTC](https://community.auth0.com/t/b2b-saas-identity-challenges-customization-and-extensibility/188767 "2025-07-04T14:15:02Z")
This blog post concludes the “B2B SaaS Identity Challenges” series talking about login customization, API security, and real-time user lifecycle management. Take a look
---
## [How to simulate IDP-Initiated SSO with an OIDC Connection](https://community.auth0.com/t/how-to-simulate-idp-initiated-sso-with-an-oidc-connection/186826)
**Author:** [@sam.yapkowitz](https://community.auth0.com/u/sam.yapkowitz)\
**Replies:** 1\
**Last updated:** [July 1, 2025, 3:11pm UTC](https://community.auth0.com/t/how-to-simulate-idp-initiated-sso-with-an-oidc-connection/186826 "2025-07-01T15:11:17Z")
Hey Auth0 Community! Many of us work in environments where users start their journey from a central Identity Provider (IDP) portal, like an Okta dashboard. While OpenID Connect (OIDC) is fundamentally Service Provider (…
---
## [B2B SaaS Identity Challenges: Enterprise Integration and Security](https://community.auth0.com/t/b2b-saas-identity-challenges-enterprise-integration-and-security/188507)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [June 27, 2025, 1:44pm UTC](https://community.auth0.com/t/b2b-saas-identity-challenges-enterprise-integration-and-security/188507 "2025-06-27T13:44:05Z")
In the third article of the “B2B SaaS Identity Challenges” series, we explore the challenges you may encounter to incorporate your B2B SaaS solution with an enterprise customer’s IT systems.
---
## [Model Context Protocol (MCP) Spec Updates from June 2025: One Small Step for a Spec, One Giant Leap for Security](https://community.auth0.com/t/model-context-protocol-mcp-spec-updates-from-june-2025-one-small-step-for-a-spec-one-giant-leap-for-security/188468)
**Author:** [@jesstemporal](https://community.auth0.com/u/jesstemporal)\
**Replies:** 0\
**Last updated:** [June 26, 2025, 1:54pm UTC](https://community.auth0.com/t/model-context-protocol-mcp-spec-updates-from-june-2025-one-small-step-for-a-spec-one-giant-leap-for-security/188468 "2025-06-26T13:54:32Z")
Learn about the new classification of MCP servers as OAuth Resource Servers, implementing Resource Indicators to prevent token misuse, and the clearer security best practices designed to help you build more robust and se…
---
## [WordPress Single Sign-On (SSO) with Auth0](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739)
**Author:** [@ramiro](https://community.auth0.com/u/ramiro)\
**Replies:** 17\
**Last updated:** [June 24, 2025, 5:40pm UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739 "2025-06-24T17:40:02Z")
See how to manage WordPress Single Sign-On (SSO) with Auth0’s identity and access management platform. Read on :locked\_with\_key: Blog post brought to you by @josh.cunningham :man\_technologist:t2:
---
## [B2B SaaS Identity Challenges: Granular Access Control](https://community.auth0.com/t/b2b-saas-identity-challenges-granular-access-control/188224)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [June 20, 2025, 4:19pm UTC](https://community.auth0.com/t/b2b-saas-identity-challenges-granular-access-control/188224 "2025-06-20T16:19:53Z")
Let’s continue to delve into the issues of Identity support in implementing B2B SaaS applications by exploring access control in this second article of the “B2B SaaS Identity Challenges” series.
---
## [B2B SaaS Identity Challenges: The Foundation](https://community.auth0.com/t/b2b-saas-identity-challenges-the-foundation/187938)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [June 13, 2025, 5:01pm UTC](https://community.auth0.com/t/b2b-saas-identity-challenges-the-foundation/187938 "2025-06-13T17:01:23Z")
What are the Identity challenges you have encountered as developers in building your B2B SaaS applications? Let’s start exploring them in this first blog post of a series.
---
## [Offload Authentication and Clear the Way for Creativity](https://community.auth0.com/t/offload-authentication-and-clear-the-way-for-creativity/187770)
**Author:** [@robertino.calcaterra](https://community.auth0.com/u/robertino.calcaterra)\
**Replies:** 1\
**Last updated:** [June 9, 2025, 4:05pm UTC](https://community.auth0.com/t/offload-authentication-and-clear-the-way-for-creativity/187770 "2025-06-09T16:05:54Z")
Free your developers to innovate! Auth0 simplifies identity, enhancing security and accelerating product launches. Read more… :writing\_hand:t2: Brought to you by Eric Wu
---
## [Introducing Auth0’s Developer Experience Principles](https://community.auth0.com/t/introducing-auth0-s-developer-experience-principles/187765)
**Author:** [@robertino.calcaterra](https://community.auth0.com/u/robertino.calcaterra)\
**Replies:** 0\
**Last updated:** [June 9, 2025, 12:03pm UTC](https://community.auth0.com/t/introducing-auth0-s-developer-experience-principles/187765 "2025-06-09T12:03:51Z")
These six principles will guide how we design and build a better, faster, and more delightful Developer Experience at Auth0. Read more… :writing\_hand:t2:Brought to you by Micheal Lopez
[Previous page](https://community.auth0.com/c/blog-discuss/56.md?no_subcategories=false)
[Next page](https://community.auth0.com/c/blog-discuss/56.md?no_subcategories=false&page=2)