Today i had taken quiz and got 12.

OIDC is simpler to use and it is the modern standard for web and mobile apps, SAML provides Enterprise Single Sign-On and is mostly used for legacy enterprise applications.

Just added a new concepts lesson. It clears up the single most common point of confusion for people getting into IAM. In the application world everything is an account. A user in AD, a profile in Salesforce, a service account, an API key. The moment you step into an IAM platform, all of it becomes one thing, an identity, and the identity is the source of truth the accounts hang off. One identity, many accounts, governed as one. It is in the Classroom IAM Concepts here. Drop questions in the comments.

@Srinath U Quick question on how authorisation works with IAM tools in practice. Since authorisation (RBAC, least privilege) sits under the IGA layer, please could you share from a day-to-day angle any real or challenging scenarios you've encountered and how you fixed them? A few things I'm curious about: a) What authorisation issues come up most often, and which ones keep recurring? b) Which of those were automated? And which are the hardest to automate, the ones that still need human decisions?

#builtmyfirstlab