How expensive is a token exchange, really?
A load-test of RFC 8693 token exchange against a two-engine PingFederate cluster on Kubernetes
Federico Carbone
Issuing test tokens with JWT Lab
Issue RS256 JWTs for API, OAuth, and MCP testing with a small hosted token issuer that works through a UI, a REST API, and MCP tools.
Centralizing MCP Authorization with PingAuthorize - Part 1
How to centralize dynamic authorization for MCP servers exposed by Azure APIM with PingAuthorize.
Securing agentic workflows with token exchange and workload identity
How to preserve user context and workload accountability across apps, agents, and MCP servers using OAuth token exchange, SPIFFE/SPIRE, and PingFederate.
Securing ChatGPT apps
How to secure a ChatGPT App with Ping Identity, OAuth, PingOne Authorize, OAuth Token Exchange, and CIBA.