Tag
All topics →Deep dives on digital identity: how people and machines prove who they are online, and how that trust is designed, secured, and scaled.
164 stories, newest first.
Latest
Meta's settlement with 51 attorneys general commits at least $12.1 billion, but the money is the survivable part. Every teen safety term in the deal depends on knowing who is under 18, and nobody has solved that yet.
Read the article
AI made it cheap to fake a face, a voice, and a video. Here is my working map of the three problems authentication now has to solve, and the tools that actually hold up in 2026: verifying people, verifying agents, and verifying content.
The leading non-human identity (NHI) management tools for 2026, compared by job: discovery and posture, secrets management, machine identity, and workload identity.
Auth0 (Okta) versus ForgeRock (Ping Identity), compared on developer experience, CIAM versus workforce IAM, deployment models, extensibility, standards, and pricing.
We cancelled Auth0 over a year ago. Not because it stopped working, but because scaling to 350,000 monthly active users made the pricing model untenable.
The CIAM platform that got you to 1 million users won't get you to 10 million AI agents.
Vercel breached after attacker compromised Context.ai, hijacked an employee's Google Workspace via OAuth, and accessed customer API keys and environment
Silent Network Authentication verifies users in 1-4 seconds using SIM cryptography without any user action.
Passwords are responsible for 80% of data breaches. Passwordless authentication eliminates the attack surface entirely.
The most powerful cryptographic primitive you've never heard of. Zero-knowledge proofs prove you know something without revealing what you know, and
CIAM is the system that registers, authenticates, and protects your customers. How it differs from IAM, what it includes, and when to buy one.
An employee saw the CFO on video. Heard colleagues speaking. Authorized $25M in transfers. Every person was an AI-generated deepfake.
60% of phishing breaches now bypass traditional MFA. Learn how AI-powered adaptive authentication and behavioral biometrics create continuous security
The decentralized identity market hits $7.4B in 2026. Every EU member state must deploy a digital identity wallet by year-end.
87% of enterprises are deploying passkeys. This complete playbook covers architecture decisions, enrollment UX, recovery design, and the deployment
AT&T's $177M settlement covers 73M customers, but the real story is how breach data from 2019 just resurfaced in 2026 with fully decrypted SSNs. Here's why.
TikTok's new U.S. ownership brought privacy changes that sparked mass deletions. Here's what actually changed and what it means for your data.
IAM is one of cybersecurity's most in-demand, and least understood, career paths. If you're a young engineer wondering where to start, this is the
Clawdbot is the viral AI assistant everyone's installing, but giving AI agents full system access raises critical security questions.
A Comprehensive Technical Guide for CTOs, CISOs, and Identity Architects
The scoring sheet for a CIAM evaluation: 25 capabilities to test every vendor against, weighted by business type, verified for 2026.
Ten provisioning and access governance platforms compared on connectors, SCIM support, certification and separation of duties, verified September 2026.
ADManager Plus, ADAudit Plus, SentinelOne, NinjaOne, and free tools from Netwrix and SolarWinds compared for AD admin, auditing, and security.
Ten identity verification platforms compared on liveness, deepfake and injection defense, coverage and published pricing, plus specialist tools and use cases.
Replacing Delinea? Ten PAM alternatives verified for 2026, with ownership changes (CyberArk to Palo Alto, StrongDM to Delinea), pricing, and fit.
Firebase Auth has no real B2B Organizations and prices enterprise SAML free only to 50 MAU. Eight alternatives compared on verified September 2026 pricing.
Cognito's free tier shrank and its hosted UI still fights you. Eight alternatives compared on verified September 2026 pricing, plus the SRP migration trap.
WorkOS bills connections, not users, and that is the whole question. Eight B2B identity alternatives compared on verified September 2026 pricing.
Twilio acquiring Stytch signals a major shift in developer CIAM. I've analyzed 20+ platforms, from Descope to Keyclock, to show you which deliver on
Your IAM strategy is obsolete. Organizations now manage 96 machine identities per human, AI agents make autonomous decisions at scale, and 45% of
Ten RSA SecurID alternatives with September 2026 pricing, where RSA ID Plus fits, and how to migrate off Authentication Manager.
Azure AD is now Microsoft Entra ID. Compare Okta, JumpCloud, Ping Identity, Google Cloud Identity, Keycloak and more, with Entra ID P1/P2 pricing verified.
Ten fraud detection platforms compared on chargeback guarantees, identity signals, AI-agent defense and published pricing. Verified September 2026.
Eight tools that stop account takeover, compared on phishing-resistant MFA, session protection, email defense and privileged access.
Ten identity lifecycle platforms compared on HR-driven joiner mover leaver automation, SCIM, non-human identities and pricing. Verified September 2026.
IGA platforms compared on access certifications, separation of duties, role management and AI agent governance, with verified pricing and 2026 market changes.
Which cloud directory should you pick? JumpCloud, Entra ID (formerly Azure AD), Okta, Google Cloud Identity and four more, compared on protocols, devices, and price.
While you perfected human identity management, machines quietly took over your infrastructure.
70% of Americans feel overwhelmed by passwords, yet only half choose secure ones despite knowing the risks.
Traditional role-based access control assumes predictable behavior, but AI agents exhibit emergent behaviors no human anticipated.
Age assurance vendors compared on independent certification, estimation accuracy and published pricing, plus the laws in force in September 2026.
Best KYB solutions compared: who to pick for US-only or global business onboarding, UBO discovery, and the 2026 FinCEN BOI and EU AMLR changes.
Ten KYC platforms compared on verification, AML screening and verified pricing, plus a vendor-neutral framework for evaluating them.
Ten passwordless CIAM platforms compared on verified September 2026 pricing and real passkey depth, plus three vendors to drop from an older shortlist.
The definitive 2026 CIAM ranking: ten platforms compared on pricing, enterprise fit, and agent identity, plus the right pick for each job.
Protect against identity-based attacks with the top 5 ITDR solutions. From Microsoft Defender to Semperis DSP, discover platforms that detect compromised
Decentralized identity platforms compared on W3C and OpenID standards support, mobile driver's licence work, eIDAS 2 readiness and real pricing.
Five credential management platforms compared on PKI lifecycle, FIDO2 and passwordless, post-quantum readiness, NIST 800-63 assurance levels and real pricing.
Top 10 PAM platforms for 2026, verified September 2026: vaulting, session recording, JIT access, secrets, pricing, and the CyberArk and StrongDM deals.
Authentication migrations fail 40% of the time, costing millions in downtime. Learn the strategies security leaders use to avoid disaster, choose the
Which IAM platform fits your organization? 21 workforce platforms compared with verified 2026 pricing, the year's acquisitions, and newer entrants to watch.
Most companies are creating massive security blind spots by forcing AI agents into human identity systems.
Your firewall can't protect data from rogue admins or compromised systems. TEEs create hardware-secured "safe rooms" inside processors - protecting your
Master login security with expert insights from building identity systems serving millions of users.
This deal represents the maturation of the identity market. The days of pure-play identity vendors competing primarily on features are ending.
Confused by the growing identity management landscape? This comprehensive guide breaks down every IAM category, from traditional workforce identity to
The complete CIAM provider directory, not a ranking: 34 identity platforms across six categories, with current ownership, published free tiers, and fit.
Master personal data security using Six Thinking Hats methodology. This strategic framework examines data protection through six distinct perspectives -
Discover API security strategies for Identity and Access Management systems. This expert guide covers authentication protocols, authorization frameworks,
Traditional CVE tracking misses thousands of critical vulnerabilities. Security teams relying only on CVE databases face dangerous blind spots.
Comprehensive Customer Identity and Access Management (CIAM) strategy guide for enterprise decision makers.
Most enterprises unknowingly pay a $700K+ annual 'password tax' through hidden costs like help desk tickets, productivity loss, and security risks.
The identity industry faces its biggest shift yet: machines now outnumber humans 90:1 in digital systems.
Machines talk to machines without human intervention. But how do you ensure these automated conversations remain secure?
Core Identity Concepts Identity and Access Management (IAM) The framework of policies, technologies, and solutions designed to ensure the right
At RSAC 2025, the cybersecurity landscape underwent a seismic shift. This analysis reveals how autonomous AI agents, deepfake technologies, and quantum
In a world where credential breaches cost companies millions, strong authentication isn't optional, it's essential.
Discover which SSO protocols put your enterprise at highest risk. This data-driven analysis compares authentication vulnerabilities across SAML, OAuth,
Struggling with proprietary identity solutions? This comprehensive guide explores how open source CIAM platforms offer enterprises transparency,
AI is revolutionizing cookie consent management, turning a complex compliance challenge into a strategic advantage.
Streamline access, reduce risks, and strengthen control with Enterprise SSO and Federated Identity.
Delve into the world of digital passports, understanding their benefits, security challenges, and how they're transforming identity verification and
IASM discovers every identity in your estate, maps what each can reach, and closes the paths attackers use. How it relates to ITDR, ISPM, CIEM and NHI security.
This guide explores SAML, OAuth, and SCIM protocols central to enterprise single sign-on (SSO) systems.
Advanced deepfake detection combines AI forensic analysis, liveness checks, and behavioral biometrics to combat synthetic fraud.
Dive deep into the technical fundamentals of Authentication and SSO systems. Learn how HTTP, security protocols, and best practices work together to
CISA releases new Sector Specific Goals for IT and product design, focusing on software development security, product design enhancements, and industry
When a former employee retains access to sensitive systems months after leaving, it's more than a security oversight, it's a serious business risk.
Explore the invisible war being fought in cyberspace, where nations battle without traditional weapons.
SAML 2.0 has been frozen since 2005 and still carries enterprise SSO, because that is what large IT organisations standardised on. Here is the protocol, the assertion flow, and the parts that go wrong.
Discover the essentials of FIDO2 authentication implementation in this developer-focused guide.
Cyber attacks are more sophisticated than ever, from ransomware and phishing to DDoS attacks.
Master enterprise CIAM performance optimization with comprehensive guide. Discover proven strategies for scaling authentication to handle millions of
Discover comprehensive security best practices for CIAM systems, including detailed implementation templates for authentication, fraud prevention,
Discover a comprehensive guide to implementing CIAM across five critical components: core configuration, security, privacy, API security, and monitoring.
Businesses face mounting cyber threats and data breaches from third-party vendors. Open-source CIAM solutions offer a secure, transparent alternative for
Explore the technical realities of passwordless authentication in this comprehensive analysis.
The AI revolution in digital identity brings unprecedented security but at what cost? As AI systems become more sophisticated in protecting our digital
Tired of passwords? AI is ushering in a new era of authentication! This post delves into cutting-edge technologies like behavioral biometrics, risk-based
As artificial intelligence evolves, the concept of "identity" extends beyond humans. This article delves into the technical intricacies of non-human
SCIM automates user provisioning and de-provisioning across cloud apps through a standard JSON schema and REST API. Here is how SCIM 2.0 actually works, how it differs from SSO, and why de-provisioning is the part that matters most.
Dive into the identity and access management world with a technical comparison of OpenID Connect (OIDC) and Security Assertion Markup Language (SAML).
JWT is a format, OAuth is delegation, OIDC is authentication on top of OAuth, and SAML is the XML predecessor enterprises still require. Here is how they fit together and which one your use case needs.
Learn how verifiable credentials using tamper-proof cryptographic signatures are transforming digital identity - enabling convenient access controls,
Discover the future of secure and innovative authentication with WebAuthn. Say goodbye to passwords and hello to passwordless auth and passkeys.
In the fast-paced world of the internet, where every click, every search, and every interaction leaves a digital footprint, the security of human
Secure your online accounts with out-of-band authentication. Learn more about cyber security and how it can protect your information.
Cybersecurity is a continuous journey, but with solid authentication systems, this trip can be safer for everyone on board.
Discover the power of federated identity management for seamless SSO and enhanced user access. Improve security and streamline authentication
OAuth 2 allows users to grant third-party applications access to their accounts without sharing their passwords.
Your online identity is precious, and protecting it should be your top priority. Discover practical strategies to safeguard your personal information and
Discover how verifiable credentials are transforming the way digital identity verification is conducted.
Learn how to effectively manage risks associated with identity and access management with the comprehensive guide.
Discover why identity security awareness is crucial in today's digital landscape. Learn how to protect yourself and your business from cyber threats.
Looking for a comprehensive guide to mobile authentication? Look no further than our Developer's Guide!
Discover how Single Sign-On (SSO) is revolutionizing digital identity management. Learn about the benefits of SSO and how it is changing the game for
With the e-commerce market experiencing a surge in demand over the past couple of years, specific security threats that require adequate attention have
IAM systems that are backed by AI offer several benefits in three major aspects: authentication, identity management and secure access
BYOI, or Bring Your Own Identity, is an increasingly popular concept in identity and access management
By incorporating built-in platform authentication mechanisms, including MFA and adaptive authentication, you can build the trust of your customers by
Verifiable credentials ensure individuals have total control over their personal information and need to verify their data instead of providing it.
Authentication, identity verification, and identification answer three different security questions. Confusing them is how products end up with weak controls.
Most B2B SaaS companies bolt on identity as an afterthought. After scaling a CIAM platform to 1B+ users, I learned that getting identity right from the
Cross-device authentication promises one identity across phones, laptops, and TVs. The privacy trade-offs deserve a hard look.
Businesses need to gear up for the new reality and ensure they create a seamless user experience by adhering to privacy and compliances while delivering a
OAuth 2.0 client credentials grant explained: how services authenticate to each other, request scoped tokens, and call APIs without a user in the loop.
Whether we talk about inappropriate data collection or a loophole in managing consumer identities, anything could lead to compromised sensitive
Machine identities now vastly outnumber human ones in most companies, and they are poorly governed. Here is the risk and the fix.
What does it mean if everyone’s an identity driven company? Before answering that question, let’s define what it means to be an identity-driven company.
Decentralized identity is becoming a reality for users of blockchain-based applications, and it’s thanks to the proliferation of unique, verifiable identifiers.
Login is the front door to every product. Here is how we balanced friction and security at LoginRadius without making users hate either.
The increasing number of account fraud and consumer data breaches indicate an immediate need for a robust mechanism to mitigate the risk.
We have hashed out some of the most common types of phishing attacks and how to prevent them.
Identity as a Service is the cloud-delivered form of IAM. What IDaaS includes, why companies pick it, and how to evaluate the major platforms.
Corporate account takeover attacks let criminals impersonate employees, drain accounts, and pivot inward. Here is how to detect and stop them.
Identity Governance and Administration is the policy and audit layer on top of IAM. Why every mid-sized organization now needs it and what to evaluate.
Many users switch websites when they are bombarded with lengthy registration forms too early. The solution to this is lazy registration
Forward-looking businesses are using artificial intelligence to solve real-world digital identity challenges.
Enterprises need to use methods to maximize the use of digital identities for multiple users.
Over the years, social engineering attacks have been a regular phenomenon against companies. It has actually become more and more sophisticated.
Digital transformation has become the need of the hour for every consumer-focused business today
Retail identity is uniquely hard: high volume, low margin, omnichannel, and fraud-heavy. Here are the challenges and how to address them.
Using someone's PII such as driving license number, social security number, address, credit card details, and name to perform different crimes and
What are the challenges businesses face related to identity management in IoT
An identity provider centralises authentication for every app you run. Here is what it does and why it is one of the highest-ROI infrastructure investments.
The Internet of Things (IoT) is creating an exciting new world of new and improved experiences for all.
Follow my blog with Bloglovin [https://www.bloglovin.com/blog/21054273/?claim=rf6ng2jvpc4]When it comes to Digital Identity concepts, Authentication is
With artificial intelligence (AI) and biometrics, users enjoy more streamlined processes while reaping the benefits of added security.
API-first CIAM unlocks the speed digital businesses need without locking them into one vendor's UI. Here is why it matters.
Broken authentication is one of the most common and most damaging classes of web vulnerability. Here is how it happens and how to stop it.
Cloud identity management decides who can reach which resource, when, and how. A practical look at IAM and CIAM in the cloud era.
IAM is the discipline of giving the right people the right access and proving it after the fact. Concepts, controls, and how to design a modern program.
Identity proofing is how you verify a person is who they claim to be at sign-up. Here is why it matters and how it works end to end.
> Let's talk about the current scope of blockchain and how it helps in securing digital identities for companies.
In 2020, consumer data is the most valuable asset for businesses, and cybercriminals are well aware of this fact.
Smart cities promise efficiency and convenience, but their backbone is identity, data, and trust. Here is what will make them work.
> App developers are increasingly turning to customer identity and access management (CIAM) solutions as B2C companies look to offer an elevated user
2FA or MFA (Two or Multi-Factor Authentication) The two-factor (2FA) or multi-factor authentication (MFA) method uses two or more factors to authenticate
In the previous article (Guide to Digital Identity-Part 1 [https://medium.com/@dip_ak/guide-to-digital-identity-part-1-4b7c8fe45ee1]), we talked about the
A practical playbook for ongoing CCPA compliance, built on what we shipped at LoginRadius and what enterprises kept tripping over.
Omnichannel programmes fail on identity, not on channels. How to build one resolvable customer identity across web, app, store, and contact centre.
Are you curious about the Digital Identity Ecosystem? If you have been looking for a good, reliable and easy-to-understand source of information and
Three calls right, three wrong, and the biggest change in media was not on the 2020 list at all. The honest scorecard, with 2026 numbers.
For any online business, "People" and "product” are the main drivers when it comes to providing a superior quality customer experience.
What I learned about consumer privacy from building LoginRadius, and the controls every CIAM platform should expose by default.
In Part II of the History of Human Identity, we showed examples of identity verification such as names and unique markings.
In Part I of The History of Identity, we covered how identity began in ancient times. For Part II, we focus on current times, where personal names are now
Single sign-on authentication, or SSO, is becoming more commonplace as the digital revolution continues to evolve.
The concept of human identity stretches back thousands of years into unrecorded history.
More than just individuals, a perfect CIAM platform needs to be able to incorporate. There are plenty of business processes and activities loaded with
The CPRA upgraded California's privacy law with new rights, new categories, and a real enforcement agency. Here is what changed.
A glimpse inside the LoginRadius Vancouver office: the team, the work, and the culture we tried to build.
In 2018 we closed a $17M Series A to scale LoginRadius. Here is what the round meant and where the journey started.
The rate of identity theft increased in 2017, amid years of fighting and a major shift in the way American debit and credit cards are used.
