Security and Identity Lab

The Security and Identity Lab helps users reason about identity systems without reducing them to buzzwords.

Core Topics

• authentication models
• authorization models
• sessions and token flows
• tenant isolation
• RBAC and ABAC
• secure cookie handling
• MFA concepts
• request-scope permission checks

Product Standard

This lab should make it easier to answer:

• what is being authenticated
• what is being authorized
• where policy is enforced
• what can leak or break under weak defaults