
4 min read
IAM Chapter 1: Identity & Authentication
Who are you, and how does a system prove it? Identity, attribute, account and authentication, pinned down with John Wick's first day at a fictional aerospace supplier.
Topics

Who are you, and how does a system prove it? Identity, attribute, account and authentication, pinned down with John Wick's first day at a fictional aerospace supplier.

Passwords, OTPs, push approval, number matching, FIDO2. Each MFA method exists because the one before it broke — walked through the attacks that forced each upgrade, ending with why AAL3 requires a hardware key.

Start here for a living study series on Identity and Access Management. Each chapter has my handwritten notes as a one-page image, built around one running example: John Wick, a design engineer at a fictional aerospace supplier.