Identity,
understood.
A practical knowledge base for identity and access management. From the first principles to the systems that connect them.
Find your starting point.
Fundamentals
Build a shared vocabulary. Understand identities, authentication, authorization, and the principles behind access.
Identity modeling
Describe people, workloads, accounts, attributes, and the relationships that connect them.
Architecture
See how identity providers, directories, policy engines, and applications fit together.
Processes
Follow an identity from onboarding to offboarding. Make access requests and reviews repeatable.
Capabilities
Map the building blocks of an IAM program, from governance to privileged access.
Design patterns
Explore reusable approaches to access control, federation, and application integration.
Use cases
Connect the concepts to everyday scenarios: onboarding, urgent offboarding, partners, pipelines, and workloads.
Standards & protocols
Know what OAuth, OpenID Connect, SAML, SCIM, WebAuthn, LDAP, and Shared Signals actually solve.
OAuth & OpenID Connect
Go deep on grants, endpoints, metadata, tokens, claims, DPoP, PAR, RAR, logout, and the threats they address.
A few good places to begin.
What is IAM?
The purpose, scope, and everyday questions of identity and access management.
Identities, accounts, and credentials
Three related concepts that should never be treated as interchangeable.
Authentication and authorization
Establishing who is acting and deciding what that subject may do.
Knowledge grows.
This handbook grows with it.
A place to collect useful ideas, connect the dots, and build a clearer understanding of IAM. Starting with the foundations, expanding with every discovery.
See what comes next