Enterprise‑grade identity, explained and demonstrated
Cut through the jargon with exact diagrams, packet‑level examples, and runnable demos for SAML, OAuth 2.0, and OpenID Connect.
SAML
SP‑initiated flow, ACS endpoints, NameID formats, attributes, bindings, and metadata.
Explore SAML →OAuth 2.0
Grants (Auth Code + PKCE, Client Credentials), scopes, consent, tokens, and RBAC mapping.
Explore OAuth →OpenID Connect
ID Token anatomy, discovery, userinfo, and authn assurance levels (IAL/AAL) patterns.
Explore OIDC →What you get
- Production‑ready mental models and diagrams.
- Runnable local demos (
node demos/node/server.js). - Cut‑and‑paste request/response samples and validation tips.
- Enterprise notes for PingFederate, SiteMinder, Okta, and Azure AD.