Tag
All topics →Identity and access management (IAM): provisioning, governance, lifecycle, and the controls that decide who can touch what across an organization.
151 stories, newest first.
Latest
The podcast stack I use as an identity founder: several identity shows at the core, Risky Business and Darknet Diaries for news and stories, AI agent identity episodes, founder shows, the six I quit, and how to build your own.
Read the article
A curator's guide to choosing security podcasts by role. For SOC, AppSec, cloud, offensive security, GRC, leadership and identity: what the role needs from audio, two or three picks with ownership noted, one standout episode, and where the full list lives.
The identity market consolidated in 2026, from Palo Alto Networks closing CyberArk to four NHI startups changing hands in ten weeks. The Identity Map sorts 255 vendors into 14 branches so buyers pick the right category before they pick a vendor.
Three RFPs out, three decks back, cheapest bid wins, and six months later you are over budget. The problem is the selection process, not the firms.
IAM decides who gets in the door. PAM controls the keys that can rewire the building. Here is the real difference, where they converge in 2026, and why your AI agents need both.
Machine identities now outnumber humans by 45 to 1 or more, and every AI agent widens the gap. Here is what an identity orchestration layer is, in plain terms, and how to build one that governs humans, workloads, and agents from a single control plane.
Every CTO re-litigates build vs buy for authentication every 18 months, and the framing is broken. The real question isn't build or buy. It's which parts of identity are commodity and which parts are your actual product.
Scaling a CIAM platform past a billion users taught me that customer identity is a trust problem: progressive profiling, risk-based auth, and passwordless done right.
The leading non-human identity (NHI) management tools for 2026, compared by job: discovery and posture, secrets management, machine identity, and workload identity.
Auth0 (Okta) versus ForgeRock (Ping Identity), compared on developer experience, CIAM versus workforce IAM, deployment models, extensibility, standards, and pricing.
I spent ten years engineering, scaling, and defending password-based authentication for a CIAM platform that grew to a billion users.
We cancelled Auth0 over a year ago. Not because it stopped working, but because scaling to 350,000 monthly active users made the pricing model untenable.
Vercel breached after attacker compromised Context.ai, hijacked an employee's Google Workspace via OAuth, and accessed customer API keys and environment
Three AI framework attacks in one week expose how classic vulnerabilities are hiding in AI's foundational plumbing, putting millions of deployments at risk.
Silent Network Authentication verifies users in 1-4 seconds using SIM cryptography without any user action.
Passwords are responsible for 80% of data breaches. Passwordless authentication eliminates the attack surface entirely.
March 2026 marks passwordless tipping point: Microsoft forces passkey migration, regulatory deadlines hit, and adoption surges to 69% of consumers.
Six secrets management options compared for 2026: dynamic secrets, deployment model, licensing and current published pricing, verified September 2026.
CIAM is the system that registers, authenticates, and protects your customers. How it differs from IAM, what it includes, and when to buy one.
60% of phishing breaches now bypass traditional MFA. Learn how AI-powered adaptive authentication and behavioral biometrics create continuous security
The decentralized identity market hits $7.4B in 2026. Every EU member state must deploy a digital identity wallet by year-end.
87% of enterprises are deploying passkeys. This complete playbook covers architecture decisions, enrollment UX, recovery design, and the deployment
AT&T's $177M settlement covers 73M customers, but the real story is how breach data from 2019 just resurfaced in 2026 with fully decrypted SSNs. Here's why.
TikTok's new U.S. ownership brought privacy changes that sparked mass deletions. Here's what actually changed and what it means for your data.
IAM is one of cybersecurity's most in-demand, and least understood, career paths. If you're a young engineer wondering where to start, this is the
Authentication requirements block 75-80% of enterprise deals, costing B2B SaaS companies millions annually.
A Comprehensive Technical Guide for CTOs, CISOs, and Identity Architects
One year after launch, MCP has become the universal standard for connecting AI agents to enterprise tools, with 97M+ monthly SDK downloads and backing
The scoring sheet for a CIAM evaluation: 25 capabilities to test every vendor against, weighted by business type, verified for 2026.
Twenty-five capabilities that separate a PAM platform that works from one that gets shelved, from discovery and vaulting through just-in-time access, session recording, and threat analytics.
Master workplace identity security with our comprehensive 2025 IAM buyers' guide. Explore 25 essential strategies from SSO to Zero Trust, with practical
Ten provisioning and access governance platforms compared on connectors, SCIM support, certification and separation of duties, verified September 2026.
ADManager Plus, ADAudit Plus, SentinelOne, NinjaOne, and free tools from Netwrix and SolarWinds compared for AD admin, auditing, and security.
Replacing Delinea? Ten PAM alternatives verified for 2026, with ownership changes (CyberArk to Palo Alto, StrongDM to Delinea), pricing, and fit.
Okta alternatives for workforce identity compared: Entra ID, Rippling, JumpCloud, Ping, OneLogin, Duo and more, with verified 2026 pricing and best-fit picks.
Twilio acquiring Stytch signals a major shift in developer CIAM. I've analyzed 20+ platforms, from Descope to Keyclock, to show you which deliver on
Your IAM strategy is obsolete. Organizations now manage 96 machine identities per human, AI agents make autonomous decisions at scale, and 45% of
Ten RSA SecurID alternatives with September 2026 pricing, where RSA ID Plus fits, and how to migrate off Authentication Manager.
Azure AD is now Microsoft Entra ID. Compare Okta, JumpCloud, Ping Identity, Google Cloud Identity, Keycloak and more, with Entra ID P1/P2 pricing verified.
Ten fraud detection platforms compared on chargeback guarantees, identity signals, AI-agent defense and published pricing. Verified September 2026.
Eight tools that stop account takeover, compared on phishing-resistant MFA, session protection, email defense and privileged access.
Ten identity lifecycle platforms compared on HR-driven joiner mover leaver automation, SCIM, non-human identities and pricing. Verified September 2026.
IGA platforms compared on access certifications, separation of duties, role management and AI agent governance, with verified pricing and 2026 market changes.
Which cloud directory should you pick? JumpCloud, Entra ID (formerly Azure AD), Okta, Google Cloud Identity and four more, compared on protocols, devices, and price.
While you perfected human identity management, machines quietly took over your infrastructure.
Static API keys scattered across repositories create exponential security debt as AI scales. The solution? Credentials that live for minutes, not months.
70% of Americans feel overwhelmed by passwords, yet only half choose secure ones despite knowing the risks.
Traditional role-based access control assumes predictable behavior, but AI agents exhibit emergent behaviors no human anticipated.
Age assurance vendors compared on independent certification, estimation accuracy and published pricing, plus the laws in force in September 2026.
Best KYB solutions compared: who to pick for US-only or global business onboarding, UBO discovery, and the 2026 FinCEN BOI and EU AMLR changes.
Ten passwordless CIAM platforms compared on verified September 2026 pricing and real passkey depth, plus three vendors to drop from an older shortlist.
The definitive 2026 CIAM ranking: ten platforms compared on pricing, enterprise fit, and agent identity, plus the right pick for each job.
Protect against identity-based attacks with the top 5 ITDR solutions. From Microsoft Defender to Semperis DSP, discover platforms that detect compromised
Decentralized identity platforms compared on W3C and OpenID standards support, mobile driver's licence work, eIDAS 2 readiness and real pricing.
Top 10 PAM platforms for 2026, verified September 2026: vaulting, session recording, JIT access, secrets, pricing, and the CyberArk and StrongDM deals.
Akamai Identity Cloud shuts down Dec 2027, but the real deadline is March 2026. Over 1,000 enterprises face forced migration as social login breaks.
Authentication migrations fail 40% of the time, costing millions in downtime. Learn the strategies security leaders use to avoid disaster, choose the
Which IAM platform fits your organization? 21 workforce platforms compared with verified 2026 pricing, the year's acquisitions, and newer entrants to watch.
Most companies are creating massive security blind spots by forcing AI agents into human identity systems.
🚨 ShinyHunters compromised Google, Qantas & dozens more using OAuth device flow attacks, bypassing MFA without exploiting a single software bug.
Most apps check user trust once during login, then ignore security changes for hours or days.
This deal represents the maturation of the identity market. The days of pure-play identity vendors competing primarily on features are ending.
Confused by the growing identity management landscape? This comprehensive guide breaks down every IAM category, from traditional workforce identity to
The complete CIAM provider directory, not a ranking: 34 identity platforms across six categories, with current ownership, published free tiers, and fit.
Discover API security strategies for Identity and Access Management systems. This expert guide covers authentication protocols, authorization frameworks,
Comprehensive Customer Identity and Access Management (CIAM) strategy guide for enterprise decision makers.
Most enterprises unknowingly pay a $700K+ annual 'password tax' through hidden costs like help desk tickets, productivity loss, and security risks.
The identity industry faces its biggest shift yet: machines now outnumber humans 90:1 in digital systems.
Machines talk to machines without human intervention. But how do you ensure these automated conversations remain secure?
Core Identity Concepts Identity and Access Management (IAM) The framework of policies, technologies, and solutions designed to ensure the right
In a world where credential breaches cost companies millions, strong authentication isn't optional, it's essential.
Authentication pages serve as both security checkpoints and critical SEO touchpoints. While 80% of data breaches involve compromised credentials, properly
Authentication issues block 75% of enterprise SaaS deals, with companies losing millions in revenue annually.
Struggling with proprietary identity solutions? This comprehensive guide explores how open source CIAM platforms offer enterprises transparency,
Streamline access, reduce risks, and strengthen control with Enterprise SSO and Federated Identity.
Passkeys use public-key cryptography, so there is no shared secret for a breach to leak or a phishing page to capture. Passwords are still everywhere. Here is where each one belongs in 2026.
IASM discovers every identity in your estate, maps what each can reach, and closes the paths attackers use. How it relates to ITDR, ISPM, CIEM and NHI security.
This guide explores SAML, OAuth, and SCIM protocols central to enterprise single sign-on (SSO) systems.
Advanced deepfake detection combines AI forensic analysis, liveness checks, and behavioral biometrics to combat synthetic fraud.
Dive deep into the technical fundamentals of Authentication and SSO systems. Learn how HTTP, security protocols, and best practices work together to
SAML 2.0 has been frozen since 2005 and still carries enterprise SSO, because that is what large IT organisations standardised on. Here is the protocol, the assertion flow, and the parts that go wrong.
Discover the essentials of FIDO2 authentication implementation in this developer-focused guide.
Master enterprise CIAM performance optimization with comprehensive guide. Discover proven strategies for scaling authentication to handle millions of
Discover comprehensive security best practices for CIAM systems, including detailed implementation templates for authentication, fraud prevention,
Discover a comprehensive guide to implementing CIAM across five critical components: core configuration, security, privacy, API security, and monitoring.
Businesses face mounting cyber threats and data breaches from third-party vendors. Open-source CIAM solutions offer a secure, transparent alternative for
As artificial intelligence evolves, the concept of "identity" extends beyond humans. This article delves into the technical intricacies of non-human
Identity and Access Management (IAM) is vital for organizations to safeguard their digital assets.
SCIM automates user provisioning and de-provisioning across cloud apps through a standard JSON schema and REST API. Here is how SCIM 2.0 actually works, how it differs from SSO, and why de-provisioning is the part that matters most.
Dive into the identity and access management world with a technical comparison of OpenID Connect (OIDC) and Security Assertion Markup Language (SAML).
The shift towards AI-powered IAM promises to enhance security, improve user experiences, and simplify complex access management tasks.
JWT is a format, OAuth is delegation, OIDC is authentication on top of OAuth, and SAML is the XML predecessor enterprises still require. Here is how they fit together and which one your use case needs.
Machines against machines, AI promises the future’s most decisive counterpunch against surging account takeover threats.
Discover the future of secure and innovative authentication with WebAuthn. Say goodbye to passwords and hello to passwordless auth and passkeys.
In the fast-paced world of the internet, where every click, every search, and every interaction leaves a digital footprint, the security of human
Secure your online accounts with out-of-band authentication. Learn more about cyber security and how it can protect your information.
Cybersecurity is a continuous journey, but with solid authentication systems, this trip can be safer for everyone on board.
Discover the power of federated identity management for seamless SSO and enhanced user access. Improve security and streamline authentication
OAuth 2 allows users to grant third-party applications access to their accounts without sharing their passwords.
Learn how to effectively manage risks associated with identity and access management with the comprehensive guide.
Looking for a comprehensive guide to mobile authentication? Look no further than our Developer's Guide!
Discover how Single Sign-On (SSO) is revolutionizing digital identity management. Learn about the benefits of SSO and how it is changing the game for
With the e-commerce market experiencing a surge in demand over the past couple of years, specific security threats that require adequate attention have
IAM systems that are backed by AI offer several benefits in three major aspects: authentication, identity management and secure access
BYOI, or Bring Your Own Identity, is an increasingly popular concept in identity and access management
CIAM becomes prominent and requires cross-functional collaboration and deliberate decision-making
Authentication, identity verification, and identification answer three different security questions. Confusing them is how products end up with weak controls.
Out-of-band authentication adds a second communication channel to verify the user. Here is how it works and where it earns its keep.
Traditional IAM was built for employees, not customers. Here are five signs your IAM cannot do the CIAM job and what to fix.
Whether we talk about inappropriate data collection or a loophole in managing consumer identities, anything could lead to compromised sensitive
Machine identities now vastly outnumber human ones in most companies, and they are poorly governed. Here is the risk and the fix.
Businesses have to be extra vigilant in safeguarding customer data. Minor mistakes can cause a massive data breach, violating data privacy regulations and
Decentralized identity is becoming a reality for users of blockchain-based applications, and it’s thanks to the proliferation of unique, verifiable identifiers.
The increasing number of account fraud and consumer data breaches indicate an immediate need for a robust mechanism to mitigate the risk.
Credential stuffing exploits password reuse at industrial scale. Here is how it works and the layered defences that actually stop it.
Identity as a Service is the cloud-delivered form of IAM. What IDaaS includes, why companies pick it, and how to evaluate the major platforms.
How your business can get the most out of AI and IoT while protecting your customers, employees, and other end-users.
Corporate account takeover attacks let criminals impersonate employees, drain accounts, and pivot inward. Here is how to detect and stop them.
Identity Governance and Administration is the policy and audit layer on top of IAM. Why every mid-sized organization now needs it and what to evaluate.
Many users switch websites when they are bombarded with lengthy registration forms too early. The solution to this is lazy registration
Over the years, social engineering attacks have been a regular phenomenon against companies. It has actually become more and more sophisticated.
Retail identity is uniquely hard: high volume, low margin, omnichannel, and fraud-heavy. Here are the challenges and how to address them.
What are the challenges businesses face related to identity management in IoT
Authentication is usually fine. Authorization is usually improvised. An IAM architect's 2026 view of enterprise application security.
API-first CIAM unlocks the speed digital businesses need without locking them into one vendor's UI. Here is why it matters.
Broken authentication is one of the most common and most damaging classes of web vulnerability. Here is how it happens and how to stop it.
Cloud identity management decides who can reach which resource, when, and how. A practical look at IAM and CIAM in the cloud era.
IAM is the discipline of giving the right people the right access and proving it after the fact. Concepts, controls, and how to design a modern program.
Identity proofing is how you verify a person is who they claim to be at sign-up. Here is why it matters and how it works end to end.
In reality, there are so many mistakes that can make your account vulnerable to cyber attacks.
Security problems are an alternative way to recognise your customers when they have forgotten their password, entered too many times the wrong passwords,
How I built LoginRadius into an IDaaS platform that handles hybrid environments, SSO, MFA, and compliance at scale.
Single-page apps changed how auth works. Here is how we approached SPA security at LoginRadius and the patterns worth keeping.
Mobile auth is harder than web auth. Here is how we approached enterprise mobile security at LoginRadius and what every team should ship.
Smart cities promise efficiency and convenience, but their backbone is identity, data, and trust. Here is what will make them work.
Why we shipped a consumer-level audit trail at LoginRadius and what it changed for enterprise risk and compliance teams.
Online gambling is a top target for fraud, ATO, and money laundering. Here is what operators must lock down to keep players and revenue safe.
Designing a CIAM platform that survives a decade of changing privacy laws, new threats, and new device types. What we did at LoginRadius.
Shipping consent management at LoginRadius and what we learned about turning a regulation into a platform feature.
Streaming platforms hold rich behavioural data and high-value accounts. Here is how to secure both without breaking the viewing experience.
The pandemic-era shift to remote work permanently changed the threat model. Here is what stuck and how to defend against it now.
In the previous article (Guide to Digital Identity-Part 1 [https://medium.com/@dip_ak/guide-to-digital-identity-part-1-4b7c8fe45ee1]), we talked about the
Marriott International experienced a new data breach in mid-January 2020, which affected about 5.2 million guests.
Are you curious about the Digital Identity Ecosystem? If you have been looking for a good, reliable and easy-to-understand source of information and
When CCPA hit in 2020, most enterprises were unprepared. Here is what LoginRadius shipped to make compliance a configuration, not a rebuild.
Single sign-on authentication, or SSO, is becoming more commonplace as the digital revolution continues to evolve.
More than just individuals, a perfect CIAM platform needs to be able to incorporate. There are plenty of business processes and activities loaded with
IAM is for employees, CIAM is for customers, and IDaaS is how either is delivered. Here is how they differ and which one you need.
Why we shipped progressive profiling at LoginRadius and how it changed the trade-off between data quality and conversion.
In 2018 we closed a $17M Series A to scale LoginRadius. Here is what the round meant and where the journey started.
The news of Canada to fine companies for not reporting data breaches is making headlines these days. Know what it means for your business.
