Identity Expert - Invidious

Identity Expert

Identity Expert is an educational channel covering modern identity, authentication, and authorization — one protocol at a time.

Each episode is a technical deep dive: spec-accurate, sourced from IETF RFCs and OIDF profiles, with annotated HTTP payloads, sequence diagrams, and threat-model walkthroughs. Episodes run 5–15 minutes.

Topics: OAuth 2.0 (PKCE, DPoP, mTLS, JAR, JARM, CIBA, RAR, FAPI 2.0, Device Grant, Token Exchange, GNAP), OpenID Connect, SIOP, OID4VCI, CAEP, AuthZEN, IGA, PAM, SCIM, Adaptive Authentication, SSO, MFA, Decentralized Identity, eIDAS 2.0, SPIFFE/SPIRE, PKI.

For security engineers, backend developers, and identity architects who need to understand the protocols they build on — not just the marketing summaries.

All content is for educational purposes only. Specifications evolve — always consult the current version of the relevant standard. Identity Expert is not affiliated with any vendor.

Subscribe for new episodes as standards evolve.

View channel on YouTube

Switch Invidious Instance

Videos

newest

oldest

popular

4:58

Tool Authorization — OAuth Gets You In, Policy Decides the Call | Identity Expert

Identity Expert

Shared 4 weeks ago

20 views

5:14

Non-Human Identity — AI Agents, Service Accounts, and Workloads | Identity Expert

Identity Expert

Shared 4 weeks ago

24 views

5:25

MCP Tool Poisoning — Trusted Agents, Confused Deputies | Identity Expert

Identity Expert

Shared 4 weeks ago

6 views

7:42

Kerberos Explained — TGTs, SPNs, KDCs & Mutual Authentication | Identity Expert

Identity Expert

Shared 4 weeks ago

25 views

7:44

DPoP vs mTLS Explained — Choosing Sender-Constrained Tokens | Identity Expert

Identity Expert

Shared 4 weeks ago

26 views

5:11

Agent Identity Lifecycle — Provisioning, Ownership, and Revocation | Identity Expert

Identity Expert

Shared 4 weeks ago

5 views

4:58

Delegation Chains — act, may_act, and Attenuation | Identity Expert

Identity Expert

Shared 4 weeks ago

9 views

5:44

ACR vs AMR — Assurance Level vs Authentication Methods Explained | Identity Expert

Identity Expert

Shared 4 weeks ago

12 views

4:42

Identity Brokering Explained | Identity Expert

Identity Expert

Shared 1 month ago

19 views

4:59

Identity Federation Explained | Identity Expert

Identity Expert

Shared 1 month ago

13 views

4:20

Front-Channel Logout Explained | Identity Expert

Identity Expert

Shared 1 month ago

10 views

4:19

Back-Channel Logout Explained | Identity Expert

Identity Expert

Shared 1 month ago

8 views

6:03

Phantom Token Pattern Explained | Identity Expert

Identity Expert

Shared 1 month ago

6 views

7:17

OIDC Session Management: session_state, check_session_iframe, Logout Drift | Identity Expert

Identity Expert

Shared 1 month ago

7 views

6:47

Kubernetes Pod Identity Explained | Identity Expert

Identity Expert

Shared 1 month ago

4 views

6:49

First-Party Apps Explained — Why Your Own App Is Still a Public Client | Identity Expert

Identity Expert

Shared 1 month ago

7 views

7:46

Credential Status Lists: Revocation and Suspension for Verifiable Credentials | Identity Expert

Identity Expert

Shared 1 month ago

9 views

8:18

EUDI Wallet Architecture — Roles, Attestations & Trust | Identity Expert

Identity Expert

Shared 1 month ago

14 views

6:23

Client Attestation Explained — OAuth 2.0 Attestation-Based Client Auth | Identity Expert

Identity Expert

Shared 1 month ago

10 views

6:22

OpenID Shared Signals Framework — SSF and RISC Explained | Identity Expert

Identity Expert

Shared 1 month ago

9 views

9:07

OAuth 2.0 Protected Resource Metadata (RFC 9728) | Identity Expert

Identity Expert

Shared 1 month ago

23 views

5:44

Device-Bound Session Credentials Explained | Identity Expert

Identity Expert

Shared 1 month ago

28 views

7:04

AAuth Explained — OAuth for AI Agents | Identity Expert

Identity Expert

Shared 1 month ago

24 views

5:46

mDL Explained — ISO Mobile Driver's License (ISO 18013-5) | Identity Expert

Identity Expert

Shared 1 month ago

15 views

12:26

SIOP Explained: Self-Issued OpenID Provider & Decentralized Auth | Identity Expert

Identity Expert

Shared 1 month ago

13 views

5:13

HTTP Message Signatures Explained — RFC 9421 | Identity Expert

Identity Expert

Shared 1 month ago

18 views

9:45

Permission Models Explained — RBAC, ABAC, and ReBAC | Identity Expert

Identity Expert

Shared 1 month ago

14 views

10:02

GNAP: Grant Negotiation and Authorization Protocol Explained | Identity Expert

Identity Expert

Shared 1 month ago

15 views

6:23

WIMSE vs SPIFFE: IETF Workload Identity | Identity Expert

Identity Expert

Shared 1 month ago

21 views

5:31

Transaction Tokens — Context-Bearing Authorization for Microservices | Identity Expert

Identity Expert

Shared 1 month ago

18 views

5:48

Step-Up Authentication Explained — RFC 9470 | Identity Expert

Identity Expert

Shared 1 month ago

16 views

10:35

RAR — Rich Authorization Requests Explained | Identity Expert

Identity Expert

Shared 1 month ago

14 views

5:28

OpenID Federation 1.0 Explained — Trust at Scale | Identity Expert

Identity Expert

Shared 1 month ago

33 views

5:55

OpenID Connect for Identity Assurance Explained — OIDC4IDA | Identity Expert

Identity Expert

Shared 1 month ago

9 views

8:19

OAuth 2.0 Explained — The Authorization Framework Every API Depends On | Identity Expert

Identity Expert

Shared 1 month ago

3 views

9:11

MCP Authorization: OAuth for AI Tools | Identity Expert

Identity Expert

Shared 1 month ago

19 views

11:07

JARM — JWT Secured Authorization Response Mode Explained | Identity Expert

Identity Expert

Shared 1 month ago

5 views

5:46

mDL Explained — ISO Mobile Driver's License (ISO 18013-5) | Identity Expert

Identity Expert

Shared 1 month ago

19 views

13:58

SPIFFE & SPIRE: Workload Identity for Zero Trust | Identity Expert

Identity Expert

Shared 1 month ago

35 views

11:58

eIDAS Explained: EU Digital Identity, Trust Services & the EUDI Wallet | Identity Expert

Identity Expert

Shared 1 month ago

111 views

11:11

AuthZEN Explained — OpenID Authorization API | Identity Expert

Identity Expert

Shared 1 month ago

30 views

5:38

Dynamic Client Registration — Self-Provisioning OAuth Clients (RFC 7591) | Identity Expert

Identity Expert

Shared 1 month ago

6 views

12:26

SIOP Explained: Self-Issued OpenID Provider & Decentralized Auth | Identity Expert

Identity Expert

Shared 1 month ago

6 views

11:14

OAuth 2.0 Device Authorization Grant — How TVs, CLIs, and IoT Devices Log In | Identity Expert

Identity Expert

Shared 1 month ago

17 views

4:37

OAuth 2.0 Security Best Current Practice Explained | Identity Expert

Identity Expert

Shared 1 month ago

3 views

10:02

GNAP: Grant Negotiation and Authorization Protocol Explained | Identity Expert

Identity Expert

Shared 1 month ago

6 views

8:35

Decentralized Identity — DIDs and Verifiable Credentials Explained | Identity Expert

Identity Expert

Shared 1 month ago

11 views

5:26

OIDC Logout Explained — RP-Initiated, Front-Channel & Back-Channel | Identity Expert

Identity Expert

Shared 1 month ago

13 views

4:47

OAuth 2.1 Explained — What Changed from 2.0 | Identity Expert

Identity Expert

Shared 1 month ago

27 views

12:17

Identity Proofing and KYC Explained — Verifying Who Someone Really Is | Identity Expert

Identity Expert

Shared 1 month ago

6 views

9:45

Permission Models Explained — RBAC, ABAC, and ReBAC | Identity Expert

Identity Expert

Shared 1 month ago

19 views

11:14

OAuth 2.0 Token Exchange Explained — RFC 8693, Delegation, and the act Claim | Identity Expert

Identity Expert

Shared 1 month ago

162 views

10:51

SCIM Explained — Automated User Provisioning at Enterprise Scale | Identity Expert

Identity Expert

Shared 1 month ago

42 views

9:53

Joiner-Mover-Leaver (JML): Identity Lifecycle Management Explained | Identity Expert

Identity Expert

Shared 1 month ago

25 views

7:20

OAuth 2.0 Token Introspection Explained — RFC 7662 | Identity Expert

Identity Expert

Shared 1 month ago

12 views

8:19

Resource Indicators for OAuth 2.0 (RFC 8707) | Identity Expert

Identity Expert

Shared 1 month ago

9 views

9:20

PAM Explained: Privileged Access Management & Just-in-Time Access | Identity Expert

Identity Expert

Shared 1 month ago

19 views

7:08

ID-JAG & Cross-App Access (XAA) Explained | Identity Expert

Identity Expert

Shared 3 months ago

155 views

7:25

Single Sign-On (SSO) Explained — OIDC, SAML & the IdP Pattern | Identity Expert

Identity Expert

Shared 3 months ago

6 views

7:44

OpenID Connect Explained — The Identity Layer Every App Depends On | Identity Expert

Identity Expert

Shared 3 months ago

4 views