Identity Expert - Invidious

Identity Expert

Identity Expert is an educational channel covering modern identity, authentication, and authorization — one protocol at a time.

Each episode is a technical deep dive: spec-accurate, sourced from IETF RFCs and OIDF profiles, with annotated HTTP payloads, sequence diagrams, and threat-model walkthroughs. Episodes run 5–15 minutes.

Topics: OAuth 2.0 (PKCE, DPoP, mTLS, JAR, JARM, CIBA, RAR, FAPI 2.0, Device Grant, Token Exchange, GNAP), OpenID Connect, SIOP, OID4VCI, CAEP, AuthZEN, IGA, PAM, SCIM, Adaptive Authentication, SSO, MFA, Decentralized Identity, eIDAS 2.0, SPIFFE/SPIRE, PKI.

For security engineers, backend developers, and identity architects who need to understand the protocols they build on — not just the marketing summaries.

All content is for educational purposes only. Specifications evolve — always consult the current version of the relevant standard. Identity Expert is not affiliated with any vendor.

Subscribe for new episodes as standards evolve.

View channel on YouTube

Switch Invidious Instance

Videos

newest

oldest

popular

4:58

Tool Authorization — OAuth Gets You In, Policy Decides the Call | Identity Expert

Identity Expert

Shared 4 days ago

9 views

5:14

Non-Human Identity — AI Agents, Service Accounts, and Workloads | Identity Expert

Identity Expert

Shared 4 days ago

13 views

5:25

MCP Tool Poisoning — Trusted Agents, Confused Deputies | Identity Expert

Identity Expert

Shared 4 days ago

2 views

7:42

Kerberos Explained — TGTs, SPNs, KDCs & Mutual Authentication | Identity Expert

Identity Expert

Shared 4 days ago

3 views

7:44

DPoP vs mTLS Explained — Choosing Sender-Constrained Tokens | Identity Expert

Identity Expert

Shared 4 days ago

10 views

5:11

Agent Identity Lifecycle — Provisioning, Ownership, and Revocation | Identity Expert

Identity Expert

Shared 4 days ago

3 views

4:58

Delegation Chains — act, may_act, and Attenuation | Identity Expert

Identity Expert

Shared 4 days ago

3 views

5:44

ACR vs AMR — Assurance Level vs Authentication Methods Explained | Identity Expert

Identity Expert

Shared 4 days ago

2 views

4:42

Identity Brokering Explained | Identity Expert

Identity Expert

Shared 1 week ago

11 views

4:59

Identity Federation Explained | Identity Expert

Identity Expert

Shared 1 week ago

8 views

4:20

Front-Channel Logout Explained | Identity Expert

Identity Expert

Shared 1 week ago

5 views

4:19

Back-Channel Logout Explained | Identity Expert

Identity Expert

Shared 1 week ago

3 views

6:03

Phantom Token Pattern Explained | Identity Expert

Identity Expert

Shared 1 week ago

4 views

7:17

OIDC Session Management: session_state, check_session_iframe, Logout Drift | Identity Expert

Identity Expert

Shared 1 week ago

2 views

6:47

Kubernetes Pod Identity Explained | Identity Expert

Identity Expert

Shared 1 week ago

2 views

6:49

First-Party Apps Explained — Why Your Own App Is Still a Public Client | Identity Expert

Identity Expert

Shared 1 week ago

6 views

7:46

Credential Status Lists: Revocation and Suspension for Verifiable Credentials | Identity Expert

Identity Expert

Shared 1 week ago

4 views

8:18

EUDI Wallet Architecture — Roles, Attestations & Trust | Identity Expert

Identity Expert

Shared 1 week ago

9 views

6:23

Client Attestation Explained — OAuth 2.0 Attestation-Based Client Auth | Identity Expert

Identity Expert

Shared 1 week ago

8 views

6:22

OpenID Shared Signals Framework — SSF and RISC Explained | Identity Expert

Identity Expert

Shared 1 week ago

3 views

9:07

OAuth 2.0 Protected Resource Metadata (RFC 9728) | Identity Expert

Identity Expert

Shared 1 week ago

12 views

5:44

Device-Bound Session Credentials Explained | Identity Expert

Identity Expert

Shared 1 week ago

17 views

7:04

AAuth Explained — OAuth for AI Agents | Identity Expert

Identity Expert

Shared 2 weeks ago

14 views

5:46

mDL Explained — ISO Mobile Driver's License (ISO 18013-5) | Identity Expert

Identity Expert

Shared 2 weeks ago

8 views

12:26

SIOP Explained: Self-Issued OpenID Provider & Decentralized Auth | Identity Expert

Identity Expert

Shared 3 weeks ago

12 views

5:13

HTTP Message Signatures Explained — RFC 9421 | Identity Expert

Identity Expert

Shared 3 weeks ago

12 views

9:45

Permission Models Explained — RBAC, ABAC, and ReBAC | Identity Expert

Identity Expert

Shared 3 weeks ago

5 views

10:02

GNAP: Grant Negotiation and Authorization Protocol Explained | Identity Expert

Identity Expert

Shared 3 weeks ago

8 views

6:23

WIMSE vs SPIFFE: IETF Workload Identity | Identity Expert

Identity Expert

Shared 3 weeks ago

15 views

5:31

Transaction Tokens — Context-Bearing Authorization for Microservices | Identity Expert

Identity Expert

Shared 3 weeks ago

16 views

5:48

Step-Up Authentication Explained — RFC 9470 | Identity Expert

Identity Expert

Shared 3 weeks ago

11 views

10:35

RAR — Rich Authorization Requests Explained | Identity Expert

Identity Expert

Shared 3 weeks ago

10 views

5:28

OpenID Federation 1.0 Explained — Trust at Scale | Identity Expert

Identity Expert

Shared 3 weeks ago

18 views

5:55

OpenID Connect for Identity Assurance Explained — OIDC4IDA | Identity Expert

Identity Expert

Shared 3 weeks ago

6 views

8:19

OAuth 2.0 Explained — The Authorization Framework Every API Depends On | Identity Expert

Identity Expert

Shared 3 weeks ago

2 views

9:11

MCP Authorization: OAuth for AI Tools | Identity Expert

Identity Expert

Shared 3 weeks ago

12 views

11:07

JARM — JWT Secured Authorization Response Mode Explained | Identity Expert

Identity Expert

Shared 3 weeks ago

5 views

5:46

mDL Explained — ISO Mobile Driver's License (ISO 18013-5) | Identity Expert

Identity Expert

Shared 4 weeks ago

16 views

13:58

SPIFFE & SPIRE: Workload Identity for Zero Trust | Identity Expert

Identity Expert

Shared 4 weeks ago

15 views

11:58

eIDAS Explained: EU Digital Identity, Trust Services & the EUDI Wallet | Identity Expert

Identity Expert

Shared 4 weeks ago

78 views

11:11

AuthZEN Explained — OpenID Authorization API | Identity Expert

Identity Expert

Shared 4 weeks ago

22 views

5:38

Dynamic Client Registration — Self-Provisioning OAuth Clients (RFC 7591) | Identity Expert

Identity Expert

Shared 4 weeks ago

5 views

12:26

SIOP Explained: Self-Issued OpenID Provider & Decentralized Auth | Identity Expert

Identity Expert

Shared 4 weeks ago

4 views

11:14

OAuth 2.0 Device Authorization Grant — How TVs, CLIs, and IoT Devices Log In | Identity Expert

Identity Expert

Shared 4 weeks ago

12 views

4:37

OAuth 2.0 Security Best Current Practice Explained | Identity Expert

Identity Expert

Shared 4 weeks ago

0 views

10:02

GNAP: Grant Negotiation and Authorization Protocol Explained | Identity Expert

Identity Expert

Shared 4 weeks ago

6 views

8:35

Decentralized Identity — DIDs and Verifiable Credentials Explained | Identity Expert

Identity Expert

Shared 4 weeks ago

6 views

5:26

OIDC Logout Explained — RP-Initiated, Front-Channel & Back-Channel | Identity Expert

Identity Expert

Shared 4 weeks ago

4 views

4:47

OAuth 2.1 Explained — What Changed from 2.0 | Identity Expert

Identity Expert

Shared 4 weeks ago

9 views

12:17

Identity Proofing and KYC Explained — Verifying Who Someone Really Is | Identity Expert

Identity Expert

Shared 4 weeks ago

4 views

9:45

Permission Models Explained — RBAC, ABAC, and ReBAC | Identity Expert

Identity Expert

Shared 4 weeks ago

12 views

11:14

OAuth 2.0 Token Exchange Explained — RFC 8693, Delegation, and the act Claim | Identity Expert

Identity Expert

Shared 4 weeks ago

91 views

10:51

SCIM Explained — Automated User Provisioning at Enterprise Scale | Identity Expert

Identity Expert

Shared 4 weeks ago

16 views

9:53

Joiner-Mover-Leaver (JML): Identity Lifecycle Management Explained | Identity Expert

Identity Expert

Shared 4 weeks ago

20 views

7:20

OAuth 2.0 Token Introspection Explained — RFC 7662 | Identity Expert

Identity Expert

Shared 4 weeks ago

5 views

8:19

Resource Indicators for OAuth 2.0 (RFC 8707) | Identity Expert

Identity Expert

Shared 4 weeks ago

5 views

9:20

PAM Explained: Privileged Access Management & Just-in-Time Access | Identity Expert

Identity Expert

Shared 4 weeks ago

12 views

7:08

ID-JAG & Cross-App Access (XAA) Explained | Identity Expert

Identity Expert

Shared 2 months ago

81 views

7:25

Single Sign-On (SSO) Explained — OIDC, SAML & the IdP Pattern | Identity Expert

Identity Expert

Shared 2 months ago

5 views

7:44

OpenID Connect Explained — The Identity Layer Every App Depends On | Identity Expert

Identity Expert

Shared 2 months ago

3 views