Field notes
The parts that are usually left out.
Things I have had to work out on real systems, written down so you can use them on yours. No listicles and no vendor summaries.
Articles
- Identity Okta FastPass: a leaked password should not be enough to get in Plenty of Okta tenants still let a password and one tapped push open everything. FastPass makes a leaked password boring. Why, what it does not fix, and how I would roll it out.
- Identity Your Okta tenant, day one The app connections are the easy part. The admin model and the naming are what get expensive later, and both get decided in a hurry in week one.
- Basics What SSO actually buys you It is sold as a security control. It is a control point, and it only becomes a security control at the step almost everybody skips.
- Agents Your agent does not need admin Every internal AI agent I have seen got admin on day one, because scoping it properly would have delayed the demo. Nobody came back.
More on the way. If there is something you want explained properly, say so and I will probably write it.
Five things I write about
- IdentityIdP design, SSO, SCIM, groups and policy.
- AgentsMachine credentials and what an agent can reach.
- DevicesEnrolment, baselines and compliance.
- BasicsFundamentals, for someone who has to fix it Monday.
- ClaimsCorrections and arguments. The unpopular thing.