IAM protocol pocket cards
Recall the main purpose of common IAM protocols and avoid confusing authentication, authorization, provisioning, and phishing resistance.
OIDC versus OAuth: what is the difference? OIDC often uses OAuth flows, but ID tokens and access tokens have different jobs. What job does SCIM perform? SCIM provisions and deprovisions users and groups across systems based on identity data. It helps automate joiner, mover, and leaver events, but it does not decide access policy by itself. SAML SSO versus SCIM provisioning SSO without provisioning can still leave stale local accounts. What job does WebAuthn perform? WebAuthn enables public-key authentication through passkeys and security keys, helping resist phishing. It strengthens proof of the user or authenticator; authorization still comes from policy…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in