Product · Engineering · AI

Hi, I'm Hameed.

Product enthusiast and software developer from India . I write about building products, working with teams, and shipping software.

Writing

Latest posts

View all posts →

Oct 19, 20267 min read

IAM Chapter 4: SAML 2.0 & SSO

The signed statement behind SSO, opened up: SP-initiated vs IdP-initiated flows, why SAML assertions resist replay, why certificate expiry is the most common SAML outage, and where the standard starts to break.

Oct 19, 20267 min read

IAM Chapter 5: OAuth 2.0, Part 1

Letting an app act for you, without handing over your password. The authorization code flow walked step by step, why the code is useless without a client secret, and the access-token-as-hotel-key-card analogy that makes refresh tokens click.

Oct 18, 20264 min read

IAM Chapter 1: Identity & Authentication

Who are you, and how does a system prove it? Identity, attribute, account and authentication, pinned down with John Wick's first day at a fictional aerospace supplier.

Oct 18, 20265 min read

IAM Chapter 2: Authorization, IdP & Directories

Being authenticated gets you in the door. Authorization decides which rooms you can open. Covers authorization vs AuthN, coarse vs fine-grained access, Active Directory, and how an identity provider makes SSO work.

Oct 18, 20266 min read

IAM Chapter 3: Authentication & MFA

Passwords, OTPs, push approval, number matching, FIDO2. Each MFA method exists because the one before it broke — walked through the attacks that forced each upgrade, ending with why AAL3 requires a hardware key.