Brute-force attacksSingle sign-onOpenID Connect and OAuthSecurity Assertion Markup LanguageStrengthening your authenticationPassword complexity rulesCAPTCHAsRate limitingMultifactor authenticationBiometricsStoring credentialsHashing, salting, and peppering your passwordsSecure credentials for outbound accessUser enumerationPublic usernamesTiming attacksSummary