Okta vs. Ping Identity: How I'd Choose
Okta vs. Ping: Okta suits cloud-first orgs that want pure SaaS. Ping suits complex, hybrid or regulated enterprises that need deployment control.
A new question every month
The blog
One question a month, answered in depth by someone who's had to make it work in production, not just on a slide.
User Access Reviews That Aren't Rubber Stamps
A user access review confirms each person's access is still appropriate. Why most become rubber stamps, and how to make reviewers' decisions count.
What Is CIEM? Cloud Entitlement Management Explained
CIEM finds every cloud identity, works out what it can actually do, and trims unused permissions. How it works and how it fits with CNAPP, IGA and PAM.
Zero Standing Privileges: Goal, Myth or Next Year's Project?
Zero standing privileges means no account holds privilege until it's needed. What's realistic, where it breaks, and how to measure progress toward it.
Just-in-Time Access: Do You Really Need It?
Just-in-time access grants privileges only when needed and removes them after. Here's how it works, where it fits, and when you're ready for it.
Certificate Lifecycle Management for 47-Day Certificates
Certificate lifecycle management covers discovery, issuance, deployment, monitoring, renewal and revocation. Here's how to get ready for 47-day TLS certs.
Build a CBOM First: Step One of Post-Quantum Readiness
A CBOM (cryptographic bill of materials) inventories where you use cryptography. It's the first step of PQC readiness. Here's how to build one.
IEC 62443 for Identity People: What It Asks You to Do
IEC 62443 secures industrial control systems. For identity teams, FR1 and FR2 set the bar: unique IDs, MFA by security level, and role-based use control.
IT/OT Convergence: Where Identity Gets Caught in the Middle
IT/OT convergence connects plant systems to business networks and the cloud. Here's what it changes for identity and access, and how to converge safely.
Non-Human Identities: The Accounts Nobody Owns
Non-human identities are the service accounts, API keys, tokens, certificates and AI agents that act without a person. How to get them under control.