The Issues of Identity and Access Management (IAM)

Brought by: Pluralsight

Overview

By using established secure network architecture patterns in the design, and then following best practices to configure each component that you plug in to the overall systems, you reduce your overall vulnerabilities significantly. This course will teach you’ll analyze issues with these mechanisms and select available solutions.

IT networks face increasing threats from both inside and outside your organization. Traditional perimeter defenses can miss insider threats, such as password leaks and fraud due to staff complacency, as well as external online threats such as zero-day attacks. To limit the presence of these threats, many IT departments are using identity and access management (IAM) solutions. In this course, The Issues of Identity and Access Management (IAM), you'll learn to look at IAM from the perspective of the issues that it can create for your organization. First, you'll dive into Oauth/OpenID and where the weaknesses are. Next, you'll explore SSO and federations. Finally, you'll learn how to setup a hacking environment using the AutoLab. When you're finished with this course, you'll be able to look at your IAM solution and see if you're protecting yourself, as well as your users.

Taught by

Dale Meredith

The Issues of Identity and Access Management (IAM)
Go to course

The Issues of Identity and Access Management (IAM)

Brought by: Pluralsight

  • Pluralsight
  • Paid
  • English
  • Certificate Available
  • Available at any time
  • intermediate
  • N/A
8.1.2PHP Version200msRequest Duration2MBMemory UsageGET en/courses/{slug}Route
    • Booting (115ms)
    • Application (84.49ms)
    • 1 x Booting (57.47%)
      114.80ms
      1 x Application (42.3%)
      84.49ms
      14 templates were rendered
      • public.courses.show (resources/views/public/courses/show.blade.php)3bladefile
        Params
        0
        course
        1
        links
        2
        config
      • public.courses.partials.breadcrumbs (resources/views/public/courses/partials/breadcrumbs.blade.php)6bladefile
        Params
        0
        __env
        1
        app
        2
        errors
        3
        course
        4
        links
        5
        config
      • public.courses.partials.heading (resources/views/public/courses/partials/heading.blade.php)7bladefile
        Params
        0
        __env
        1
        app
        2
        errors
        3
        course
        4
        links
        5
        config
        6
        classes
      • public.courses.partials.details (resources/views/public/courses/partials/details.blade.php)6bladefile
        Params
        0
        __env
        1
        app
        2
        errors
        3
        course
        4
        links
        5
        config
      • public.courses.partials.breadcrumbs (resources/views/public/courses/partials/breadcrumbs.blade.php)6bladefile
        Params
        0
        __env
        1
        app
        2
        errors
        3
        course
        4
        links
        5
        config
      • public.courses.partials.heading (resources/views/public/courses/partials/heading.blade.php)7bladefile
        Params
        0
        __env
        1
        app
        2
        errors
        3
        course
        4
        links
        5
        config
        6
        classes
      • public.layouts.main (resources/views/public/layouts/main.blade.php)6bladefile
        Params
        0
        __env
        1
        app
        2
        errors
        3
        course
        4
        links
        5
        config
      • public.layouts.partials.meta (resources/views/public/layouts/partials/meta.blade.php)6bladefile
        Params
        0
        __env
        1
        app
        2
        errors
        3
        course
        4
        links
        5
        config
      • public.layouts.partials.navbar (resources/views/public/layouts/partials/navbar.blade.php)6bladefile
        Params
        0
        __env
        1
        app
        2
        errors
        3
        course
        4
        links
        5
        config
      • public.auth.profile.partials.links (resources/views/public/auth/profile/partials/links.blade.php)6bladefile
        Params
        0
        __env
        1
        app
        2
        errors
        3
        course
        4
        links
        5
        config
      • public.auth.profile.partials.link (resources/views/public/auth/profile/partials/link.blade.php)8bladefile
        Params
        0
        __env
        1
        app
        2
        errors
        3
        course
        4
        links
        5
        config
        6
        route
        7
        title
      • public.auth.profile.partials.link (resources/views/public/auth/profile/partials/link.blade.php)8bladefile
        Params
        0
        __env
        1
        app
        2
        errors
        3
        course
        4
        links
        5
        config
        6
        route
        7
        title
      • public.auth.profile.partials.link (resources/views/public/auth/profile/partials/link.blade.php)8bladefile
        Params
        0
        __env
        1
        app
        2
        errors
        3
        course
        4
        links
        5
        config
        6
        route
        7
        title
      • public.layouts.partials.flash-session (resources/views/public/layouts/partials/flash-session.blade.php)6bladefile
        Params
        0
        __env
        1
        app
        2
        errors
        3
        course
        4
        links
        5
        config
      uri
      GET en/courses/{slug}
      middleware
      web, localize:en
      controller
      App\Http\Controllers\CourseController@show
      as
      en.courses.show
      namespace
      prefix
      /en
      where
      file
      app/Http/Controllers/CourseController.php:17-35
      6 statements were executed11.25ms
      • select * from `courses` where `slug_en` = 'the-issues-of-identity-and-access-management-(iam)' limit 1
        9.51ms/app/Http/Controllers/CourseController.php:20corspedia
        Metadata
        Bindings
        • 0. the-issues-of-identity-and-access-management-(iam)
        Backtrace
        • 17. /app/Http/Controllers/CourseController.php:20
        • 18. /vendor/laravel/framework/src/Illuminate/Routing/Controller.php:54
        • 19. /vendor/laravel/framework/src/Illuminate/Routing/ControllerDispatcher.php:43
        • 20. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:260
        • 21. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:205
      • update `courses` set `visitors` = `visitors` + 1, `courses`.`updated_at` = '2025-06-04 11:15:39' where `id` = 5421
        890μs/app/Http/Controllers/CourseController.php:21corspedia
        Metadata
        Bindings
        • 0. 2025-06-04 11:15:39
        • 1. 5421
        Backtrace
        • 17. /app/Http/Controllers/CourseController.php:21
        • 18. /vendor/laravel/framework/src/Illuminate/Routing/Controller.php:54
        • 19. /vendor/laravel/framework/src/Illuminate/Routing/ControllerDispatcher.php:43
        • 20. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:260
        • 21. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:205
      • select `id`, `name_en`, `name_ar`, `topic_id`, `slug_en`, `slug_ar` from `subjects` where `subjects`.`id` in (158)
        270μs/app/Http/Controllers/CourseController.php:23corspedia
        Metadata
        Backtrace
        • 20. /app/Http/Controllers/CourseController.php:23
        • 21. /vendor/laravel/framework/src/Illuminate/Routing/Controller.php:54
        • 22. /vendor/laravel/framework/src/Illuminate/Routing/ControllerDispatcher.php:43
        • 23. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:260
        • 24. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:205
      • select `id`, `name_en`, `name_ar`, `slug_en`, `slug_ar` from `topics` where `topics`.`id` in (1)
        210μs/app/Http/Controllers/CourseController.php:23corspedia
        Metadata
        Backtrace
        • 25. /app/Http/Controllers/CourseController.php:23
        • 26. /vendor/laravel/framework/src/Illuminate/Routing/Controller.php:54
        • 27. /vendor/laravel/framework/src/Illuminate/Routing/ControllerDispatcher.php:43
        • 28. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:260
        • 29. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:205
      • select * from `providers` where `providers`.`id` in (57) and `providers`.`deleted_at` is null
        180μs/app/Http/Controllers/CourseController.php:23corspedia
        Metadata
        Backtrace
        • 20. /app/Http/Controllers/CourseController.php:23
        • 21. /vendor/laravel/framework/src/Illuminate/Routing/Controller.php:54
        • 22. /vendor/laravel/framework/src/Illuminate/Routing/ControllerDispatcher.php:43
        • 23. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:260
        • 24. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:205
      • select * from `html_files` where `html_files`.`id` = 5412 limit 1
        190μs/app/Models/Course.php:84corspedia
        Metadata
        Bindings
        • 0. 5412
        Backtrace
        • 21. /app/Models/Course.php:84
        • 28. view::public.courses.show:29
        • 30. /vendor/laravel/framework/src/Illuminate/Filesystem/Filesystem.php:125
        • 31. /vendor/laravel/framework/src/Illuminate/View/Engines/PhpEngine.php:58
        • 32. /vendor/laravel/framework/src/Illuminate/View/Engines/CompilerEngine.php:72
      App\Models\HtmlFile
      1
      App\Models\Provider
      1
      App\Models\Topic
      1
      App\Models\Subject
      1
      App\Models\Course
      1
        _token
        VkeH2yGk5jW5dANjjrdonqBebXihxdNc1vWKxWcw
        locale
        en
        _previous
        array:1 [ "url" => "https://www.corspedia.com/en/courses/the-issues-of-identity-and-access-managem...
        _flash
        array:2 [ "old" => [] "new" => [] ]
        PHPDEBUGBAR_STACK_DATA
        []
        path_info
        /en/courses/the-issues-of-identity-and-access-management-%28iam%29
        status_code
        200
        
        status_text
        OK
        format
        html
        content_type
        text/html; charset=UTF-8
        request_query
        []
        
        request_request
        []
        
        request_headers
        0 of 0
        array:24 [ "cf-ipcountry" => array:1 [ 0 => "US" ] "cf-connecting-ip" => array:1 [ 0 => "18.191.33.110" ] "cdn-loop" => array:1 [ 0 => "cloudflare; loops=1" ] "x-forwarded-proto" => array:1 [ 0 => "https" ] "x-forwarded-for" => array:1 [ 0 => "18.191.33.110" ] "sec-fetch-site" => array:1 [ 0 => "none" ] "accept" => array:1 [ 0 => "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7" ] "user-agent" => array:1 [ 0 => "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" ] "upgrade-insecure-requests" => array:1 [ 0 => "1" ] "sec-ch-ua-platform" => array:1 [ 0 => ""Windows"" ] "sec-ch-ua-mobile" => array:1 [ 0 => "?0" ] "sec-ch-ua" => array:1 [ 0 => ""Chromium";v="130", "HeadlessChrome";v="130", "Not?A_Brand";v="99"" ] "cache-control" => array:1 [ 0 => "no-cache" ] "pragma" => array:1 [ 0 => "no-cache" ] "sec-fetch-dest" => array:1 [ 0 => "document" ] "cf-ray" => array:1 [ 0 => "94a70379a87ff4a2-ORD" ] "accept-encoding" => array:1 [ 0 => "gzip, br" ] "priority" => array:1 [ 0 => "u=0, i" ] "sec-fetch-user" => array:1 [ 0 => "?1" ] "sec-fetch-mode" => array:1 [ 0 => "navigate" ] "cf-visitor" => array:1 [ 0 => "{"scheme":"https"}" ] "host" => array:1 [ 0 => "www.corspedia.com" ] "content-length" => array:1 [ 0 => "" ] "content-type" => array:1 [ 0 => "" ] ]
        request_server
        0 of 0
        array:50 [ "USER" => "www-data" "HOME" => "/var/www" "HTTP_CF_IPCOUNTRY" => "US" "HTTP_CF_CONNECTING_IP" => "18.191.33.110" "HTTP_CDN_LOOP" => "cloudflare; loops=1" "HTTP_X_FORWARDED_PROTO" => "https" "HTTP_X_FORWARDED_FOR" => "18.191.33.110" "HTTP_SEC_FETCH_SITE" => "none" "HTTP_ACCEPT" => "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7" "HTTP_USER_AGENT" => "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "HTTP_UPGRADE_INSECURE_REQUESTS" => "1" "HTTP_SEC_CH_UA_PLATFORM" => ""Windows"" "HTTP_SEC_CH_UA_MOBILE" => "?0" "HTTP_SEC_CH_UA" => ""Chromium";v="130", "HeadlessChrome";v="130", "Not?A_Brand";v="99"" "HTTP_CACHE_CONTROL" => "no-cache" "HTTP_PRAGMA" => "no-cache" "HTTP_SEC_FETCH_DEST" => "document" "HTTP_CF_RAY" => "94a70379a87ff4a2-ORD" "HTTP_ACCEPT_ENCODING" => "gzip, br" "HTTP_PRIORITY" => "u=0, i" "HTTP_SEC_FETCH_USER" => "?1" "HTTP_SEC_FETCH_MODE" => "navigate" "HTTP_CF_VISITOR" => "{"scheme":"https"}" "HTTP_HOST" => "www.corspedia.com" "REDIRECT_STATUS" => "200" "SERVER_NAME" => "corspedia.com" "SERVER_PORT" => "443" "SERVER_ADDR" => "141.95.147.152" "REMOTE_USER" => "" "REMOTE_PORT" => "19028" "REMOTE_ADDR" => "172.71.1.166" "SERVER_SOFTWARE" => "nginx/1.18.0" "GATEWAY_INTERFACE" => "CGI/1.1" "HTTPS" => "on" "REQUEST_SCHEME" => "https" "SERVER_PROTOCOL" => "HTTP/2.0" "DOCUMENT_ROOT" => "/var/www/corspedia/public" "DOCUMENT_URI" => "/index.php" "REQUEST_URI" => "/en/courses/the-issues-of-identity-and-access-management-%28iam%29" "SCRIPT_NAME" => "/index.php" "CONTENT_LENGTH" => "" "CONTENT_TYPE" => "" "REQUEST_METHOD" => "GET" "QUERY_STRING" => "" "SCRIPT_FILENAME" => "/var/www/corspedia/public/index.php" "PATH_INFO" => "" "FCGI_ROLE" => "RESPONDER" "PHP_SELF" => "/index.php" "REQUEST_TIME_FLOAT" => 1749035739.3909 "REQUEST_TIME" => 1749035739 ]
        request_cookies
        []
        
        response_headers
        0 of 0
        array:5 [ "content-type" => array:1 [ 0 => "text/html; charset=UTF-8" ] "cache-control" => array:1 [ 0 => "no-cache, private" ] "date" => array:1 [ 0 => "Wed, 04 Jun 2025 11:15:39 GMT" ] "set-cookie" => array:2 [ 0 => "XSRF-TOKEN=eyJpdiI6IjcrbzJMSFVQZkMyR0JYSHdncGdieEE9PSIsInZhbHVlIjoibS92dXlJdG54Y2NFSGRLQ09HSERpTkg5VWprcUNNNml4LzdCbmlnVGhOTk4wYk9IeU5zT1lNamFUZVpEekxuaS9maU9pOHZhQU5MY0prWElOeFJQV2cwMGIveE14VHBGZWZsUWV5VFB4QzFrNmVLanFrVVJZOThEKy8xa2M1dTgiLCJtYWMiOiJkMDdmYzIxYjIwMTgwMDc5ZGVmZDViYTJkZDNlMGQ3Mjg1ZjI0YmY2OWJjYzIzMzYwOWIyZjczMDE0MTFiZDMxIiwidGFnIjoiIn0%3D; expires=Wed, 04 Jun 2025 13:15:39 GMT; Max-Age=7200; path=/; samesite=laxXSRF-TOKEN=eyJpdiI6IjcrbzJMSFVQZkMyR0JYSHdncGdieEE9PSIsInZhbHVlIjoibS92dXlJdG54Y2NFSGRLQ09HSERpTkg5VWprcUNNNml4LzdCbmlnVGhOTk4wYk9IeU5zT1lNamFUZVpEekxuaS9maU9pO" 1 => "laravel_session=eyJpdiI6IndQMCtIa0dlTi9mVVVWaStSVFNCZXc9PSIsInZhbHVlIjoiaTF6ZWo3T1Q2MUpvRXU5Slhtd05sMGg5TlB6dGl2WHFHSHZBNTdOcFJPRGQxN3g0K0ZwOWNweDBGSHcrOG5VdDhxbG9KZ2VxL2ZIUHBGTmFqVkgvNGYvaXQ3Mi9xQnFRK0JxZTZnU1JJL0hLQzZKa0ovRFZTaE9vY3JsaExSc28iLCJtYWMiOiI1NTIzM2Q3ZmJlMDU4ZDNjZmRhZTk2MmRjZDYzOTIxMmI0YjU1NDFjMTYyYmYwZmUzNjYzOWZjNWQzMTEzZjhlIiwidGFnIjoiIn0%3D; expires=Wed, 04 Jun 2025 13:15:39 GMT; Max-Age=7200; path=/; httponly; samesite=laxlaravel_session=eyJpdiI6IndQMCtIa0dlTi9mVVVWaStSVFNCZXc9PSIsInZhbHVlIjoiaTF6ZWo3T1Q2MUpvRXU5Slhtd05sMGg5TlB6dGl2WHFHSHZBNTdOcFJPRGQxN3g0K0ZwOWNweDBGSHcrOG5VdDhx" ] "Set-Cookie" => array:2 [ 0 => "XSRF-TOKEN=eyJpdiI6IjcrbzJMSFVQZkMyR0JYSHdncGdieEE9PSIsInZhbHVlIjoibS92dXlJdG54Y2NFSGRLQ09HSERpTkg5VWprcUNNNml4LzdCbmlnVGhOTk4wYk9IeU5zT1lNamFUZVpEekxuaS9maU9pOHZhQU5MY0prWElOeFJQV2cwMGIveE14VHBGZWZsUWV5VFB4QzFrNmVLanFrVVJZOThEKy8xa2M1dTgiLCJtYWMiOiJkMDdmYzIxYjIwMTgwMDc5ZGVmZDViYTJkZDNlMGQ3Mjg1ZjI0YmY2OWJjYzIzMzYwOWIyZjczMDE0MTFiZDMxIiwidGFnIjoiIn0%3D; expires=Wed, 04-Jun-2025 13:15:39 GMT; path=/XSRF-TOKEN=eyJpdiI6IjcrbzJMSFVQZkMyR0JYSHdncGdieEE9PSIsInZhbHVlIjoibS92dXlJdG54Y2NFSGRLQ09HSERpTkg5VWprcUNNNml4LzdCbmlnVGhOTk4wYk9IeU5zT1lNamFUZVpEekxuaS9maU9pO" 1 => "laravel_session=eyJpdiI6IndQMCtIa0dlTi9mVVVWaStSVFNCZXc9PSIsInZhbHVlIjoiaTF6ZWo3T1Q2MUpvRXU5Slhtd05sMGg5TlB6dGl2WHFHSHZBNTdOcFJPRGQxN3g0K0ZwOWNweDBGSHcrOG5VdDhxbG9KZ2VxL2ZIUHBGTmFqVkgvNGYvaXQ3Mi9xQnFRK0JxZTZnU1JJL0hLQzZKa0ovRFZTaE9vY3JsaExSc28iLCJtYWMiOiI1NTIzM2Q3ZmJlMDU4ZDNjZmRhZTk2MmRjZDYzOTIxMmI0YjU1NDFjMTYyYmYwZmUzNjYzOWZjNWQzMTEzZjhlIiwidGFnIjoiIn0%3D; expires=Wed, 04-Jun-2025 13:15:39 GMT; path=/; httponlylaravel_session=eyJpdiI6IndQMCtIa0dlTi9mVVVWaStSVFNCZXc9PSIsInZhbHVlIjoiaTF6ZWo3T1Q2MUpvRXU5Slhtd05sMGg5TlB6dGl2WHFHSHZBNTdOcFJPRGQxN3g0K0ZwOWNweDBGSHcrOG5VdDhx" ] ]
        session_attributes
        0 of 0
        array:5 [ "_token" => "VkeH2yGk5jW5dANjjrdonqBebXihxdNc1vWKxWcw" "locale" => "en" "_previous" => array:1 [ "url" => "https://www.corspedia.com/en/courses/the-issues-of-identity-and-access-management-%28iam%29" ] "_flash" => array:2 [ "old" => [] "new" => [] ] "PHPDEBUGBAR_STACK_DATA" => [] ]