Domain

Identity & Access Management

Who is this request from, and what are they allowed to do — the authentication and authorization layer every other domain in this compendium quietly assumes already works.

  1. Authentication Fundamentals
  2. OAuth 2.0 & OIDC
  3. SSO & Identity Federation
  4. Token-Based Sessions & JWTs
  5. Authorization Models
  6. API & Service-to-Service Auth
  7. Zero Trust Architecture
  8. Secrets Management