Blog

Clear explanations and practical notes on identity and security.

Latest

Authentication and Authorization

May 25, 2026

Authentication vs. Authorization explained with examples.
When to use PKCE

May 19, 2026

PKCE is not "OAuth for public clients." It's what OAuth should have been all along.

The Emerging Third Pillar of IAM

Apr 21, 2026

There's a third pillar of IAM emerging, and it's all anyone seems to be capable of talking about anymore, whether they realize it or not.
SCIM Is Not What You Think It Is

Apr 8, 2026

Most people who've heard of SCIM describe it as "the protocol that syncs users." That's not wrong, exactly. But it's incomplete enough to cause real problems when you're building a provisioning pipeline and suddenly wondering why your app has ghost accounts, delayed deprovisioning, and a sync that only kind of works.
What is Digital Identity? A Beginners Guide

Jan 15, 2026

Welcome to Identity Explained. Learn what digital identity is, why it matters in 2026, and how to protect your online presence. Start here.