A comprehensive guide to understanding identity and access management in modern distributed systems. Learn about authentication, authorization, tokens, protocols, and best practices.
Explore Identity Fundamentals →
Introduction As AI tools become more powerful, they need secure and standardized ways to access external data sources. The Model Context Protocol (MCP) provides exactly that: a standardized protocol for AI tools to connect with various services and platforms. In this article, we’ll explore what MCP servers are, how they work, and walk through a practical example of connecting Claude Code to GitLab. What is MCP (Model Context Protocol)? The Model Context Protocol is a standardized protocol that enables AI assistants to securely connect with external services and access data. Think of it as a bridge that allows AI tools to interact with APIs, databases, and platforms in a consistent, secure manner. ...
Introduction Modern APIs need robust authentication to protect sensitive resources. MS Entra ID (formerly Azure Active Directory) provides enterprise-grade OAuth 2.0 authentication that integrates seamlessly with Spring Boot applications. In this article, you’ll learn how to: Register an application in MS Entra ID using Terraform Configure a Spring Boot API to validate OAuth 2.0 access tokens Implement API endpoint protection Test your secured API with real tokens This is the first article in a series on Spring Boot API security with MS Entra. Future articles will cover implementing role-based access control (RBAC) using app_roles and fine-grained authorization patterns. ...
Introduction The N+1 query problem is one of the most common performance bottlenecks in applications that use databases. It’s particularly prevalent when using Object-Relational Mapping (ORM) tools, and can silently degrade your application’s performance as your data grows. Understanding and preventing this problem is crucial for building scalable applications. What is the N+1 Query Problem? The N+1 query problem occurs when your application executes 1 query to fetch N records, and then executes N additional queries to fetch related data for each of those records. This results in N+1 total queries instead of just 1 or 2 optimized queries. ...
Introduction One of the most common sources of confusion in identity and access management is the difference between authentication and authorization. While these terms are often used interchangeably, they represent distinct concepts that serve different purposes in security systems. Authentication: Who Are You? Authentication is the process of verifying someone’s identity. It answers the question: “Who are you?” Common Authentication Methods Something you know: Passwords, PINs, security questions Something you have: Hardware tokens, mobile devices, smart cards Something you are: Biometrics (fingerprints, face recognition, iris scans) Multi-factor authentication (MFA): Combining multiple methods for stronger security Authentication Flow Example ...
Introduction Managing Microsoft Entra ID (formerly Azure Active Directory) resources requires proper authentication and tooling. Whether you’re automating app registrations, configuring conditional access policies, or managing users and groups, Azure CLI and Terraform provide powerful infrastructure-as-code capabilities. In this article, you’ll learn: How to install and configure Azure CLI How to authenticate with az login --allow-no-subscriptions How to obtain Microsoft Graph access tokens How to configure Terraform’s AzureAD provider What happens behind the scenes during authentication Why Azure CLI and Terraform? Azure CLI provides direct command-line access to Azure and Entra ID resources. It’s essential for: ...