Articles
I’ve written several technical articles since 1997 for various blogs, websites, and magazines, both in English and in Italian. Here you can find a list of the most recent ones:
On-Behalf-Of Is a Pattern. Token Exchange Is the Standard.
Find out the difference between On-Behalf-Of and OAuth Token Exchange, and why the two are often confused.
2026-10-16 
Introducing IdentiFlows.dev: A Visual Reference for Identity Flows
Find out how to quickly get the identity flow diagram you were looking for and cannot remember where you last saw it.
2026-09-29
Confused Deputy: The Old Bug That AI Agents Keep Reintroducing
A category of vulnerability we aimed to eradicate is re-emerging with the rise of AI agents.
2026-09-22
Building Secure AI Agents with Microsoft Agent Framework and Auth0: Human-in-the-Loop Approval
Ensure your AI agent asks for your permission before performing a critical action.
2026-09-21
Authorization Terminology is a Mess: Let's Fix It
Clarify authorization terminology by separating six axes: administration, model, policy, information, decision, and enforcement.
2026-08-31
Building Secure AI Agents with Microsoft Agent Framework and Auth0: Sending Email with Token Vault
Allow your .NET AI agent to send emails on your behalf securely using the Auth0 Token Vault.
2026-08-19
Building Secure AI Agents with Microsoft Agent Framework and Auth0: RAG Filtering
Learn how to build a RAG system with Microsoft Agent Framework and protect it with Auth0 Fine-Grained Authorization.
2026-08-12
Building Secure AI Agents with Microsoft Agent Framework and Auth0: User Authentication
Learn how to add user authentication to an AI agent built with Microsoft Agent Framework and C#: the first step to secure it and the first part of a new article series.
2026-08-03
Everybody Wants to Be a Dev!
Does AI really make it possible for anyone to create apps? Can anyone really become a developer?
2026-07-19