Coming to the IAM MembershipIAM Protocols: SAML, OAuth, OIDC and SCIM
Understand SAML, OAuth, OIDC and SCIM, and fix them when they break.
- Stage
- IAM Engineer
- Level
- Intermediate
- Format
- Video lessons
About this video
This SkillsBuild video course explains how systems exchange identity using SAML, OAuth 2.0, OpenID Connect and SCIM. You'll see what each protocol sends, step by step, and how to read it. This is core knowledge for the engineer stage, where a failed sign-in or provisioning call lands on your desk.
What you'll learn
- SAML assertions, metadata, signing certificates and SP versus IdP initiated sign-in
- OAuth 2.0 grant types, scopes, access tokens and refresh tokens
- How OpenID Connect adds ID tokens and user sign-in to OAuth
- Reading a JWT: header, claims, signature and expiry
- SCIM users and groups endpoints, and how provisioning calls work
- Common failures: clock skew, wrong audience, redirect URI mismatch, expired certificates
- Using browser developer tools to see exactly what was sent
What's included
- Step-by-step diagrams of each flow
- Walkthroughs of real sign-in traffic captured in a browser
- Broken flows to diagnose before the answer is shown
- A small project: set up SSO for a test app and document it
Who it's for
- IAM analysts moving towards engineering roles
- Engineers who configure SSO but want to understand what happens underneath
- Developers connecting applications to an identity provider
- Anyone who often gets stuck on failed SSO tickets
By the end, you'll be able to explain each protocol and work through a failed sign-in or provisioning call methodically.