Latest from Identity Authority

Technical articles, standards guidance, and community insight on IAM, PAM, and Zero Trust.

a promotional graphic telling you that PCI Compliance is no longer an annual exercise and that continuous monitory must be built in

All Teams4 IAM Architects59 Identity Governance Administrators14 CISOs & Security Leaders14 SecOps Engineers12 PAM Engineers10 IT Governance & Compliance Teams4 Cyber-Risk Analysts3 Directory Services Engineers1

Topics:All4 FIDO & Passkeys46 OAuth & OIDC18 Governance & Compliance11 Authorization Concepts9 Tokens & Sessions6 Identity Lifecycle5 Federation & SSO4 Multi-Factor Methods4 Directory Services3 Privileged Access3 Passwords & Hashing3 Access Control Models2 Zero Trust Architecture2 general1

4 articles in IAM Architects · Authorization Concepts · Clear filtersSort byNewest·Trending

Authorization Concepts

Latest

4 min read

AI Workflow Authorization Template

You ve built AI workflows that read support tickets, parse GitHub issues, or process form submissions. But these workflows might be letting unauthenticated users trigger privileged actions in your ent

For IAM ArchitectsRead article

Six Mistakes That Turn Identity Source Migrations Into Outages

Authorization Concepts

6 min read

Six Mistakes That Turn Identity Source Migrations Into Outages

You ve planned the migration, scheduled the maintenance window, and notified stakeholders. Then you flip the switch in AWS IAM Identity Center , and every user in your organization loses access to eve

For IAM ArchitectsRead

AI Wrote the Code. Who Wrote the Policy?

Authorization Concepts

5 min read

AI Wrote the Code. Who Wrote the Policy?

When Andrej Karpathy coined vibe coding in early 2025, he highlighted a trend many development teams already recognized: using AI to generate code quickly without fully understanding it. This approach

For IAM ArchitectsRead

Mapping MCP Tool Calls to AuthZEN Decisions

Authorization Concepts

5 min read

Mapping MCP Tool Calls to AuthZEN Decisions

The Challenge The OpenID Foundation s AuthZEN Working Group tackled a key interoperability issue: AuthZEN offers a standardized API for authorization decisions, but each protocol and system uses diffe

For IAM ArchitectsRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now