Core principles of identity, authentication protocols, and foundational security architecture.
An introductory guide to the foundational concept of IAM: definition of digital identity, the concepts that get confused (subject, identity, account, profile), and the building blocks that make it operational (attributes, claims, entitlements, and credentials).
Beyond human users: identities of devices, workloads, and AI agents. Why the entire industry now says that identity — not the network — is the new security perimeter.
How IAM fits into the NIST CSF framework, which MITRE ATT&CK techniques it counters, and what the Verizon DBIR and Mandiant M-Trends reports say about why credentials are today's dominant attack vector.
A walk through IAM's evolution in four waves — from the IT optimization of the 90s to today's Identity Security. Why understanding the history helps you read the present-day decisions you'll find in any organization.
A detailed walk through the five domains that make up modern IAM — Access Management, IGA, PAM, CIAM, and ITDR — with their capabilities, audiences, use cases, and where they overlap with one another.
How the daily processes of an IAM program look in practice — aggregation from authoritative sources, master record, account correlation, orphan detection, and the Joiner-Mover-Leaver cycle — with a complete healthcare-sector case.
A deep dive into the Joiner-Mover-Leaver lifecycle — the identity state machine, birthright vs role-based vs requestable vs just-in-time access, why the Mover is the hardest step, leaver deprovisioning, the HR/IT/manager/app-owner RACI, an automation maturity model, KPIs, failure modes, and the regulations that mandate it.
An end-to-end worked example of the IAM operational cycle and JML in a hospital network that runs both a public and a private wing — multiple authoritative sources, dual-affiliation physicians, rotating residents, break-glass access to medical records, license-driven deprovisioning, and HIPAA-grade audit.
An end-to-end worked example of the IAM operational cycle and JML in a fast-scaling cashback-app startup — where the enemy is speed and SaaS sprawl, not regulation. SCIM provisioning from an IdP, role templates by squad, JIT production access, offboarding across 60 SaaS apps, and meeting SOC 2 and PCI-DSS while growing 10x.
An end-to-end worked example of the IAM operational cycle and JML in a consolidated mid-market IT consultancy — where consultants rotate constantly between client engagements, access often lives in clients' own tenants via federation, the Mover is the dominant motion, and the core risk is one client's data following a consultant onto the next.