D04 · Identity Protocols & Cryptography

Key knowledge areasCopy Anchor Link

• OAuth 2.0
• OpenID Connect (OIDC)
• SAML 2.0
• Kerberos
• LDAP
• SCIM 2.0
• JSON Web Tokens (JWT)
• JSON Web Keys (JWK/JWKS)
• Public Key Infrastructure (PKI)
• X.509 Certificates
• Public Key Cryptography
• Digital Signatures
• Cryptographic Key Management
• Federation Protocols

Career alignmentCopy Anchor Link

• TRACK A — Identity Platform & CIAM Engineering: Core domain. View track
• TRACK B — Enterprise IAM / PAM / IGA Engineering: Core domain. View track

Suggested learning outcomesCopy Anchor Link

• Trace OAuth, OIDC and SAML trust boundaries.
• Explain SCIM, LDAP, Kerberos, PKI, X.509 and JWT roles.

These prompts are editorial learning aids retained from the earlier textbook. They are not additional requirements in v0.4.

Connected questionsCopy Anchor Link

• What really happens when you sign in to a workstation?
• How should a DevOps engineer reach production?
• When an AI agent acts, whose authority does it use?

Build competency evidenceCopy Anchor Link

Explain a mechanism, analyze an implementation or failure, build a tested lab, and justify an architecture. Keep shared technical explanations in the Knowledge Base and link to them from research.

Domain name, scope, knowledge areas and representative technologies follow the authoritative Framework v0.4. Questions may span multiple domains.