IAM Handbook

In today's interconnected world, where data breaches and cyber threats loom large, safeguarding digital assets has become paramount. Organizations face the formidable challenge of protecting their sensitive information while ensuring that authorized individuals have seamless access to the resources they need. This is where Identity and Access Management (IAM) steps in as a crucial discipline that underpins modern security practices.

IAM lies at the heart of establishing and maintaining a secure digital ecosystem. It encompasses a set of principles, processes, and technologies that govern the identification, authentication, authorization, and auditing of users and their interactions within an organization's information systems.

At its core, IAM seeks to answer the fundamental questions of "Who has access to what?" and "What can they do with it?" By effectively managing identities and controlling access to digital resources, organizations can mitigate risks, comply with regulations, enhance operational efficiency, and build trust with their stakeholders. This book delves deep into the core concepts of Identity and Access Management, exploring its key components, best practices, and real-world implementation strategies, to equip both security professionals and decision-makers with the knowledge necessary to navigate this dynamic field.

This book serves as an introductory book focusing on the fundamentals and core concepts that an IAM professional needs to understand.

The first part is from chapter 1 to 5, which focuses on some of the basic knowledge of modern Web Applications and Networks. Specifically, chapter1 talks about general web structure and REST. Chapter 2 starts to look at LDAP and chapter 3 is about Database. Chapter 4 talks about HTTP. Chapter 5 and 6 look at different aspects of networks.

The second part is from chapter 7 to 12, which focuses on IAM essentials. Chapter 7 describes the basics of cryptography. Chapter 8 and 9 describe OAuth2 and various grant flows. Chapter 10 introduces OIDC which is on top of OAuth2.0. Chapter 11 and 12 focuses on SAML.

I hope you enjoy this book and find it useful in the world of IAM.