Everyone knows you well, and loves you of course, but still, would you mind intro yourself, maybe in one-liner? Sure, I am ChatGPT, an advanced language model developed by OpenAI that can generate human-like text based on the input provided to me. How would you want to begin this conversation…

Zanzibar is Google’s consistent, global authorization system; a project started at Google in 2012. It primarily plays two roles. It acts as a storage system for access control lists and groups used by hundreds of Google projects (Maps, Google Drive, Calendar, and so on) to store permissions of digital objects…

This blog is the script of a talk I did internally at WSO2 in 2015 to inspire the team to build their personal brand. Found this today, buried in my Google Docs, and thought of sharing publicly (unedited), in case if someone finds it helpful! Good Morning folks, thanks for…

In my previous blog, The Next TCP/IP Moment in Identity, I discussed why the enterprises will demand for developer-first IAM. …

Loved reading the book Ask Your Developer: How to Harness the Power of Software Developers and Win in the 21st Century by Jeff Lawson. Jeff says in the book that every company is on a journey to becoming a software company and everyone is starting to see the world through…

We had our 35th Silicon Valley IAM meetup on 24th October to talk about HashiCorp Vault. Dan McTeer, the Strategic Technologist at HashiCorp and Bryan Krausen, a consultant on HashiCorp and AWS, presented in depth the Vault architecture and use cases, and took lot of questions from the audience. Dan and Bryan are also the co-authors of the book, Running HashiCorp Vault in Production.

Companies and organizations have strategic decisions to make at the Customer Identity & Access Management (CIAM) front. First, they have to decide whether to invest into a dedicated CIAM solution or to build on existing infrastructure. If there is already a foundation, what should be their next steps to have…

The OAuth 2.1 authorization framework enables a third-party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third-party application to obtain access on its own behalf…

Customer Identity and Access Management (CIAM) over the time has become a bit of an overloaded term. There are multiple articles, blogs, analyst reports explaining what CIAM is and defining it in different ways. The objective of this blog is to provide my perspective of CIAM in one-line definition. Before…