# IDP Published articles for IDP. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Beyond embedding: How to secure AI/BI Dashboards for every viewer DevFeed: [Beyond embedding: How to secure AI/BI Dashboards for every viewer]() Original publisher: [Read original article]() Author: Sonakshi Pandey Published: 2026-09-09T14:04:44Z Content type: tutorial Language: en Sources: [Databricks]() Topics: [databricks](), [Authorization](), [Grafana](), [SDKs](), [Back end](), [data]() Tags: [authorization](), [backend](), [dashboards](), [databricks](), [embedded](), [guide](), [idp](), [mapping](), [platform](), [product](), [sdk](), [sql]() ### AI overview This guide presents a Databricks design pattern for securing embedded AI/BI Dashboards for different viewers. It uses scoped embed tokens, __aibi_external_value, Unity Catalog row filters and column masks, and identity-provider-synchronized groups so one dashboard can show each viewer only the authorized regions and fields. The same entitlement table governs embedded dashboard access and direct Databricks SQL queries. ### Source excerpt The challengeEmbedding a Databricks AI/BI Dashboard in a customer-facing application is relatively straightforward... ## Internal Developer Portals: Why Native CI/CD Drives Scale DevFeed: [Internal Developer Portals: Why Native CI/CD Drives Scale]() Original publisher: [Read original article]() Author: Rashmi Hegde Published: 2026-09-08T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [Platform Engineering](), [CI/CD](), [developer velocity](), [Automation](), [Scalability]() Tags: [automation](), [ci-cd](), [developer-velocity](), [idp](), [scalability](), [self-service](), [velocity]() ### AI overview This article argues that internal developer portals need native CI/CD integration to move beyond service catalogs and documentation. It explains that integrated pipelines can reduce context switching, support self-service workflows, help enforce standards, and improve developer velocity and scalability. ### Source excerpt Internal developer portals need native CI/CD integration to scale effectively. Learn how integrated pipelines improve velocity. Explore Harness IDP. | Blog ## What is platform engineering? DevFeed: [What is platform engineering?]() Original publisher: [Read original article]() Author: Luca Galante Published: 2026-09-03T16:27:44Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [Platform Engineering](), [internal developer platform](), [AI Bots](), [Artificial Intelligence](), [cloud-infrastructure]() Tags: [agents](), [ai](), [ai-agents](), [developer-platform](), [engineering](), [idp](), [infrastructure](), [internal-developer-platform](), [platform](), [platform-engineering](), [software-development](), [workflows]() ### AI overview Platform engineering is presented as the discipline of building internal platforms that provide self-service paths for software teams and increasingly AI agents. The article explains how Internal Developer Platforms standardize and automate engineering work, and how Agentic Development Platforms add infrastructure and path specifications for collaboration between engineers and AI agents. ### Source excerpt Platform engineering is the method and discipline of designing and building platforms that enable self-service capabilities for teams, and increasingly AI agents, to automate the recurring aspects of knowledge work. ## Developer Self-Service Pipelines with Harness IDP DevFeed: [Developer Self-Service Pipelines with Harness IDP]() Original publisher: [Read original article]() Author: Rashmi Hegde Published: 2026-08-26T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [CI/CD](), [Deployment](), [Provisioning](), [Microservice]() Tags: [ci-cd](), [deployment](), [developer](), [idp](), [platform](), [provisioning](), [self-service]() ### AI overview This article explains how platform teams can connect Harness IDP self-service workflows to CI/CD and deployment pipelines. It covers triggering deployments, provisioning infrastructure, and managing promotion logic while preserving governance and operational consistency. ### Source excerpt Connect developer self-service to production with Harness IDP's pipeline integration. Automate deployments and boost velocity. Learn more. | Blog ## What is a Minimum Viable Platform (MVP)? DevFeed: [What is a Minimum Viable Platform (MVP)?]() Original publisher: [Read original article]() Author: Luca Galante Published: 2026-08-21T14:37:28Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [Platform Engineering](), [internal developer platform](), [Developer Platform](), [Shared Responsibility Model]() Tags: [engineering](), [evaluation](), [gartner](), [idp](), [internal-developer-platform](), [organizational](), [platform](), [platform-engineering](), [shared-responsibility](), [speed]() ### AI overview This article explains why platform engineering initiatives often fail despite widespread adoption of internal developer platforms. It argues that culture, process, and delivery speed matter more than tooling choices, and recommends starting with a Minimum Viable Platform to build stakeholder support and deliver value quickly. ### Source excerpt Unlock success in platform engineering: Avoid common pitfalls, embrace MVP approach, and win stakeholder support for a transformative platform initiative. ## Measuring IDP Success: Metrics Beyond Tracking DevFeed: [Measuring IDP Success: Metrics Beyond Tracking]() Original publisher: [Read original article]() Author: Rashmi Hegde Published: 2026-08-21T00:00:00Z Content type: tutorial Language: en Sources: [Harness Blog]() Topics: [internal developer portal](), [Developer experience](), [code productivity](), [Platform Engineering]() Tags: [developer-experience](), [developer-productivity](), [idp](), [internal-developer-portal](), [platform](), [privacy](), [surveillance]() ### AI overview This guide explains how to measure Internal Developer Portal success with outcome-based metrics that respect developer privacy. It emphasizes ROI and system-health indicators such as deployment frequency and mean time to recovery, while warning that individual activity tracking can erode trust, distort behavior, and undermine adoption. ### Source excerpt Learn how to measure IDP success with meaningful metrics that respect developer privacy. Discover ROI indicators that matter. Explore now. | Blog ## Continuous Delivery Excellence with Harness IDP DevFeed: [Continuous Delivery Excellence with Harness IDP]() Original publisher: [Read original article]() Author: Rashmi Hegde Published: 2026-08-21T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [Continuous Delivery (CD)](), [internal developer portal](), [CI/CD](), [Platform Engineering](), [Deployment](), [Automation](), [Orchestration](), [Provisioning]() Tags: [automation](), [ci-cd](), [continuous-delivery](), [deployment](), [developer-velocity](), [idp](), [internal-developer-portal](), [orchestration](), [platform-engineering](), [provisioning](), [self-service](), [tooling]() ### AI overview This article explains how Harness Internal Developer Portal can support continuous delivery through self-service workflows, standardized deployment pipelines, and unified service catalogs. It argues that delivery friction often comes from cognitive overhead, unclear prerequisites, fragmented permissions and configuration, and insufficiently discoverable workflows rather than a lack of pipeline capability. ### Source excerpt Achieve continuous delivery excellence using Harness Internal Developer Portal. Streamline deployments, boost velocity, and empower developers. Learn more. | Blog ## SCIM Deprovisioning Is a Promise Your App Probably Breaks DevFeed: [SCIM Deprovisioning Is a Promise Your App Probably Breaks]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-08-06T01:29:36Z Content type: article Language: en Sources: [WorkOS Blog]() Topics: [Security](), [API](), [HTTP](), [JSON](), [Internet Engineering Task Force (IETF)](), [Protocol (disambiguation)]() Tags: [api](), [http](), [identity](), [idp](), [ietf](), [json](), [net-conf](), [protocol](), [schema](), [security](), [standards](), [state](), [token]() ### AI overview This article explains that SCIM deprovisioning updates identity state but does not automatically invalidate an application's sessions, refresh tokens, or API keys. It describes how identity providers commonly use soft deactivation and why applications must explicitly handle the resulting offboarding state. ### Source excerpt SCIM tells you a user is gone, but sessions, refresh tokens, and API keys often outlive deprovisioning. Here's why offboarding needs more than a user row. ## When is the right time to adopt an IDP? DevFeed: [When is the right time to adopt an IDP?]() Original publisher: [Read original article]() Author: Trevor Garcia Published: 2026-07-30T10:13:18Z Content type: article Language: en Sources: [Developer Experience & Platform Engineering Blog | Port]() Topics: [internal developer portal](), [Platform Engineering](), [Developer experience](), [DevOps](), [sdlc](), [Product Management](), [Tooling]() Tags: [article](), [best-practices](), [developer](), [developer-experience](), [developer-portal](), [devops](), [engineering](), [idp](), [internal-developer-portal](), [management](), [organizational](), [platform](), [platform-engineering](), [sdlc](), [software-development](), [tech-stack](), [tooling](), [tools]() ### AI overview This article explains when organizations should consider adopting an internal developer portal (IDP). It identifies scaling challenges such as operational overhead, cognitive overload, duplicated tools, unclear ownership, and inconsistent tooling. It also describes how DevOps, platform engineering, and product management practices can support an IDP that improves developer experience, standardizes tooling, and consolidates organizational knowledge. ### Source excerpt Organizations have to consider a lot of details before adopting an IDP, and it can be hard to know when is the right time. ## How to win executive buy-in for your Internal Developer Platform DevFeed: [How to win executive buy-in for your Internal Developer Platform]() Original publisher: [Read original article]() Author: Mallory Haigh Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [internal developer platform](), [Platform Engineering](), [Developer Platform]() Tags: [article](), [business](), [cognitive-load](), [developer-platform](), [executive](), [idp](), [internal-developer-platform](), [leadership](), [platform](), [platform-engineering]() ### AI overview This article presents tactical frameworks for winning sustained executive sponsorship for an Internal Developer Platform. It explains how to translate technical platform benefits into business outcomes such as faster time to market, lower operational costs, reduced security risk, and improved talent retention, while addressing executive objections, modeling ROI, building cross-functional support, and driving adoption. ### Source excerpt Tactical frameworks to secure executive sponsorship for an IDP: translate benefits into business outcomes, model ROI, handle objections, and drive adoption. ## Why enterprises fail at platform engineering: Project vs Product mindset DevFeed: [Why enterprises fail at platform engineering: Project vs Product mindset]() Original publisher: [Read original article]() Author: Sam Barlien Published: 2026-07-23T05:40:01Z Content type: opinion Language: en Sources: [Platform Engineering Blog]() Topics: [Platform Engineering](), [internal developer platform](), [DevOps](), [Developer Platform]() Tags: [cognitive-load](), [devops](), [engineering](), [idp](), [internal-developer-platform](), [leadership](), [organizational](), [platform-engineering](), [scale](), [workflows]() ### AI overview The article argues that enterprises succeed with platform engineering when they treat the Internal Developer Platform as a continuously evolving internal product rather than a finite engineering project. A product-led approach investigates developers' problems, supports adoption, aligns stakeholders, secures ongoing investment, and uses a Platform Product Manager to connect user needs, technical priorities, and business goals. ### Source excerpt Discover why enterprises struggle with platform engineering and how shifting from a project mindset to a product-led approach drives adoption, alignment, and real developer value ## The empathy gap: Why your platform needs UX, not just APIs DevFeed: [The empathy gap: Why your platform needs UX, not just APIs]() Original publisher: [Read original article]() Author: Tatiana Mikhaleva Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [User experience (UX)](), [Platform Engineering](), [internal developer platform](), [Developer Platform](), [dashboards](), [Backstage](), [Kubernetes](), [Terraform](), [dora metrics]() Tags: [backstage](), [developer-platform](), [dora-metrics](), [idp](), [kubernetes](), [logs](), [metrics](), [onboarding](), [platform-engineering](), [product-design](), [terraform](), [ux]() ### AI overview The article argues that Internal Developer Platforms should be designed as products with strong UX, not exposed as collections of APIs. It describes how cognitive friction, unclear errors, outdated documentation, and tool switching reduce developer adoption and productivity. It recommends visual engineering practices such as pipeline graphs, actionable failure messages, and service status dashboards, while questioning an exclusive focus on DORA metrics. ### Source excerpt Discover "the empathy gap" in platform engineering. Learn why relying only on APIs and DORA metrics leads to low Internal Developer Platform (IDP) adoption, and how treating your platform as a product with great UX can reduce cognitive friction and bring developers joy ## Understanding platform engineering's role in staying compliant with the EU's CRA DevFeed: [Understanding platform engineering's role in staying compliant with the EU's CRA]() Original publisher: [Read original article]() Author: Nigel Douglas Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [Platform Engineering](), [Security](), [vulnerability management](), [supply-chain-security](), [incident]() Tags: [compliance](), [cyber-resilience-act](), [engineering](), [eu](), [idp](), [incident](), [platform](), [platform-engineering](), [policy](), [regulatory](), [sboms](), [secure-by-default](), [secure-software](), [security](), [software-supply-chain](), [supply-chain](), [vulnerabilities](), [vulnerability-management]() ### AI overview The article explains how platform engineering can operationalize compliance with the EU's Cyber Resilience Act by embedding secure-by-default practices, automated SBOMs, and rapid incident reporting into an Internal Development Platform. It also outlines CRA compliance milestones and manufacturer responsibilities, including vulnerability management and security updates. ### Source excerpt The EU's Cyber Resilience Act (CRA) mandates secure software by design. Discover how platform engineering operationalizes compliance by embedding secure-by-default standards, automated SBOMs, and rapid incident reporting into your Internal Development Platform (IDP). This approach transforms compliance into a frictionless golden path ## Creating a shared platform vision: How platform leaders align teams DevFeed: [Creating a shared platform vision: How platform leaders align teams]() Original publisher: [Read original article]() Author: Mallory Haigh Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [Platform Engineering](), [internal developer platform](), [internal developer portal]() Tags: [developer-platform](), [idp](), [internal-developer-platform](), [leadership](), [organizational](), [platform](), [platform-engineering](), [strategy]() ### AI overview This article presents a framework for creating a shared vision for an internal developer platform. It explains that platform initiatives often fail because executives, developers, security, and operations teams have different expectations, incentives, and measures of success. Platform leaders must build stakeholder alignment, communicate shared value, and use deliberate strategy to support genuine adoption. ### Source excerpt Framework for aligning executives, developers, and ops on an internal developer platform vision using shared language, metrics, and product-minded roadmaps ## Platform engineering makes a difference. Here's how to prove it DevFeed: [Platform engineering makes a difference. Here's how to prove it]() Original publisher: [Read original article]() Author: Liz Coolman Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [Platform Engineering](), [internal developer platform](), [AI Engineering](), [Developer Platform](), [configuration](), [Security](), [telemetry]() Tags: [ai](), [ai-engineering](), [ai-impact](), [cognitive-load](), [configuration](), [developer-platform](), [encryption](), [engineering](), [idp](), [infrastructure](), [least-privilege](), [metrics](), [performance](), [platform](), [platform-engineering](), [platforms](), [security](), [software](), [speed](), [tooling]() ### AI overview This article explains how platform engineering teams can prove the value of an internal developer platform (IDP) to executives. It describes how IDPs reduce developer friction and cognitive load through standardized golden paths, configuration, and tooling; provide guardrails for security, encryption, and least-privilege access; and help organizations manage the effects of AI on engineering work. It recommends measuring velocity indicators such as cycle time and lead time to change, along with AI adoption, impact, and other metrics, to quantify platform performance and guide improvements. ### Source excerpt Learn how to prove the value of platform engineering to executives. This article outlines the essential metrics--from velocity and AI impact to developer sentiment--needed to quantify the success of your Internal Developer Platform (IDP) and keep pace with evolving AI capabilities. ## How platform engineering plus VMs ease modernization DevFeed: [How platform engineering plus VMs ease modernization]() Original publisher: [Read original article]() Author: Jennifer Riggins Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [Platform Engineering](), [virtualization](), [Containers](), [Cloud Native Ecosystem](), [Security](), [Scalability](), [Provisioning]() Tags: [architecture](), [cloud](), [cloud-native](), [containers](), [engineering](), [idp](), [infrastructure](), [operational](), [platform](), [platform-engineering](), [policy](), [provisioning](), [scalability](), [security](), [virtual-machines]() ### AI overview The article explains how combining containers in virtual machines with platform engineering and internal developer platforms can ease modernization. It argues that VMs provide stronger isolation, security boundaries, resource flexibility, and performance comparable to bare metal, while a policy-driven platform layer improves provisioning, utilization, compliance, and scalability. ### Source excerpt Explore why running containers in Virtual Machines (VMs) with a platform engineering strategy is essential for modern cloud environments. Learn how VMs deliver superior security, isolation, and resource management compared to bare metal, while achieving performance parity. ## New reference architectures for IDPs on AWS, GCP, and Azure: Version 2.0 now available DevFeed: [New reference architectures for IDPs on AWS, GCP, and Azure: Version 2.0 now available]() Original publisher: [Read original article]() Author: Luca Galante Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [internal developer platform](), [Platform Engineering](), [Architecture & Design](), [Cloud](), [Amazon Web Services](), [Artificial Intelligence](), [Security]() Tags: [ai](), [architecture](), [aws](), [azure](), [cloud](), [code](), [configuration](), [gcp](), [identity-control](), [idp](), [internal-developer-platform](), [platform-engineering](), [policy](), [secrets-management](), [security](), [workflows]() ### AI overview Version 2.0 of cloud-agnostic internal developer platform reference architectures for AWS, GCP, and Azure reflects real-world platform implementations and enterprise operating patterns. The update emphasizes multi-platform support, dedicated AI integration, embedded security, and code-first declarative and GitOps workflows. ### Source excerpt Explore version 2.0 of cloud-agnostic IDP reference architectures for AWS, GCP, and Azure, featuring multi-platform support, AI integration, and embedded security for modern enterprise platform teams. ## Backstage TechDocs vs. Port: Modernize your internal documentation DevFeed: [Backstage TechDocs vs. Port: Modernize your internal documentation]() Original publisher: [Read original article]() Author: Roi Talpaz Published: 2026-07-22T11:08:30Z Content type: article Language: en Sources: [Developer Experience & Platform Engineering Blog | Port]() Topics: [Backstage](), [internal developer portal](), [Developer experience](), [Scalability](), [Architecture & Design]() Tags: [articles](), [backstage](), [blog-post](), [developer-experience](), [documentation](), [idp](), [techdocs]() ### AI overview This article compares Backstage TechDocs with Port as approaches to modernizing internal documentation. It explains how manually maintained documentation becomes stale, causing wasted troubleshooting time, incorrect service setup, workflow disruption, misconfigurations, and security risks. It presents internal developer portals such as Backstage and Port as alternatives that use automated workflows and self-service solutions to reduce reliance on manual updates. ### Source excerpt Compare Backstage TechDocs vs Port to understand documentation workflows, scalability, and developer experience differences. ## Harness IDP AI Asset Catalog Organizes and Governs Prompts, Skills, Agents, Plugins, and Commands DevFeed: [Harness IDP AI Asset Catalog Organizes and Governs Prompts, Skills, Agents, Plugins, and Commands]() Original publisher: [Read original article]() Author: Rashmi Hegde Published: 2026-07-21T00:00:00Z Content type: opinion Language: en Sources: [Harness Blog]() Topics: [internal developer portal](), [shadow AI](), [Platform Engineering](), [Generative AI](), [Security]() Tags: [ai](), [catalog](), [discovery](), [git](), [governance](), [idp](), [platform-engineering](), [search](), [security](), [shadow-ai]() ### AI overview The article presents Harness IDP's AI Asset Catalog, which brings prompts, skills, agents, plugins, and custom commands into a governed software catalog. It describes Git-based discovery, semantic search, ownership and lineage mapping, and automated scorecards for risk and compliance. ### Source excerpt Harness IDP AI Asset Catalog helps teams discover, govern, and reuse AI assets with automated Git discovery, scorecards, and semantic search. | Blog ## Enable Your SAML Requesting App for Cross App Access DevFeed: [Enable Your SAML Requesting App for Cross App Access]() Original publisher: [Read original article]() Author: Alisa Duncan Published: 2026-07-17T05:00:00Z Content type: tutorial Language: en Sources: [Okta Developer]() Topics: [OAuth 2.0](), [Authorization](), [JSON Web Tokens](), [OpenID connect (OIDC)](), [API](), [AI Agent]() Tags: [api](), [authorization](), [claude](), [cross-app-access](), [digital-signature](), [identity](), [idp](), [implementation](), [jwt](), [oauth](), [oauth-2-0](), [oidc](), [openid-connect](), [payload](), [saml](), [signing](), [sso](), [xaa]() ### AI overview This guide explains how SAML-federated applications can use Cross App Access (XAA) to connect to third-party applications without migrating to OpenID Connect. It covers exchanging a SAML assertion for an OAuth refresh token, an ID-JAG, and an access token, along with token validation and Okta configuration. ### Source excerpt If you currently federate enterprise customers using Security Assertion Markup Language (SAML) and want to connect with third-party applications without migrating to OpenID Connect (OIDC), this Cross App Access (XAA) guide is for you. The Identity Assertion Authorization Grant specification, the basis of XAA, was originally designed with OIDC in mind. To use it in SAML applications, you must accommodate specific security and uniqueness requirements. This guide details what you need to support and how to make resource requests to a third-party app using XAA. Table of Contents How XAA in SAML works XAA implementation checklist for SAML-federated applications Request the refresh token Request the ID-JAG token Request the access token Handle token expiration Making cross-application requests from your SAML app securely Configure your XAA SAML Requesting App in Okta Register and configure the AI Agent in Okta Test the SAML 2.0 app Validate the XAA connection end-to-end Learn more about Cross App Access, SAML, and OAuth 2.0 How XAA in SAML works When an agent (like one running in Claude) needs API access, it presents an Identity Assertion Authorization Grant (ID-JAG). The ID-JAG is a short-lived JSON Web Token (JWT) issued by the Identity Provider (IdP) for your app's user. You exchange the ID-JAG token for an access token to the resource application you're connecting with. The sequence diagram shown below describes the SAML XAA flow and how your application fits in. You'll handle the flow in two parts: where your application requests the ID-JAG from the IdP using a refresh token, and where your app requests the access token from the ID-JAG from the third-party resource app's authorization server. XAA implementation checklist for SAML-federated applications Follow the guide in this section to support XAA in your SAML application when your app connects to a third-party resource application. The XAA flow places the burden of token validation onto the IdP and the resource ap ## Top 5 internal developer platform tools DevFeed: [Top 5 internal developer platform tools]() Original publisher: [Read original article]() Author: Netta Borowitsh Published: 2026-05-04T10:34:44Z Content type: article Language: en Sources: [Developer Experience & Platform Engineering Blog | Port]() Topics: [internal developer platform](), [Platform Engineering](), [DevOps](), [developer-productivity](), [sdlc](), [Tooling]() Tags: [cncf](), [developer-experience](), [developer-productivity](), [devops](), [idp](), [internal-developer-platform](), [platform-engineering](), [sdlc](), [tooling]() ### AI overview The article introduces internal developer platforms as product-like systems that provide developer self-service through golden paths, reduce cognitive load, and abstract infrastructure and tooling complexity. It explains how platform engineering teams can build these platforms iteratively around common developer needs and assess their maturity using the CNCF platform engineering maturity model. ### Source excerpt Explore the top 5 internal developer platform tools to improve productivity, visibility, and developer self-service capabilities. ## Backstage in Amsterdam: Highlights from BackstageCon and KubeCon + CloudNativeCon Europe 2026 DevFeed: [Backstage in Amsterdam: Highlights from BackstageCon and KubeCon + CloudNativeCon Europe 2026]() Original publisher: [Read original article]() Author: André Wanlin, Emma Indal & Ruxandra Stanciu, Spotify Published: 2026-04-20T00:00:00Z Content type: article Language: en Sources: [Backstage Software Catalog and Developer Platform Blog]() Topics: [Backstage](), [Developer experience](), [internal developer portal](), [Tooling](), [Command-line interface](), [Maintainers](), [pull-requests]() Tags: [2026](), [backstage](), [catalog](), [cli](), [community](), [contributors](), [developer-experience](), [developer-portal](), [ecosystem](), [engineering](), [europe](), [explore](), [idp](), [internal-developer-platform](), [keynote](), [kubecon](), [maintainers](), [open-source](), [platform-engineering](), [plugin](), [plugins](), [pull-requests](), [q-a](), [red-hat](), [software-catalog](), [software-templates](), [techdocs]() ### AI overview A recap of BackstageCon and KubeCon + CloudNativeCon Europe 2026 in Amsterdam highlights community talks, maintainer discussions, a documentary premiere, a live keynote demonstration, and ContribFest. It also covers Backstage deployment governance, unified developer experience, catalog workflows, platform CLI usage, and the plugin ecosystem. ### Source excerpt Backstage in Amsterdam: Highlights from BackstageCon and KubeCon + CloudNativeCon Europe 2026 ## Keycloak 26.5.5 released DevFeed: [Keycloak 26.5.5 released]() Original publisher: [Read original article]() Author: Keycloak Team Published: 2026-03-05T00:00:00Z Content type: release Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [saml](), [Security](), [Authentication]() Tags: [2026](), [authentication](), [broker](), [cve](), [download](), [idm](), [idp](), [kerberos](), [keycloak](), [keycloak-release](), [ldap](), [login](), [migration-guide](), [openid-connect](), [release](), [saml](), [security](), [sso]() ### AI overview Keycloak 26.5.5 was released on March 5, 2026. The release includes security fixes for SAML broker authentication bypass, disabled identity provider enforcement, disabled SAML identity provider login, and encrypted assertion injection. ### Source excerpt To download the release go to Keycloak downloads. Upgrading Before upgrading refer to the migration guide for a complete list of changes. All resolved issues Security fixes #46909 CVE-2026-3047 SAML broker: Authentication bypass due to disabled SAML client completing IdP-initiated login #46910 CVE-2026-3009 Improper Enforcement of Disabled Identity Provider in IdentityBrokerService #46911 CVE-2026-2603 Disabled SAML IdP still allows IdP-initiated broker login #46912 CVE-2026-2092 saml broker encrypted assertion injection ## Get a jump on ContribFest with the new web app DevFeed: [Get a jump on ContribFest with the new web app]() Original publisher: [Read original article]() Author: Elaine de Mattos Silva Bezerra, DB Systel GmbH, Heikki Hellgren, OP Financial Group & André Wanlin, Spotify Published: 2026-02-25T00:00:00Z Content type: news Language: en Sources: [Backstage Software Catalog and Developer Platform Blog]() Topics: [Backstage](), [Web app](), [web applications](), [Web]() Tags: [backstage](), [community](), [developer-experience](), [developer-portal](), [getting-started](), [idp](), [internal-developer-platform](), [open-source](), [platform-engineering](), [software-catalog](), [software-templates](), [techdocs](), [web](), [web-app]() ### AI overview Backstage announces a new ContribFest web app for the March 26, 2026 session at KubeCon + CloudNativeCon in Amsterdam. The app helps contributors set up a local environment, find curated issues, access contribution resources, and view past contributions and hosts. ### Source excerpt Get a jump on ContribFest with the new web app [Next page]()