IAM97 — Identity, Access & Trust Intelligence
IAM97 is the identity and access knowledge section of Cyber97. It explains authentication, federation, cryptographic trust, tokens, tickets, assertions, and enterprise identity attacks in a clear CISO-grade manner.
Why IAM97?
Identity is now one of the most important control planes in modern cybersecurity. Enterprise access is no longer limited to a username and password. It is built on protocols, trust anchors, session artifacts, cryptographic keys, assertions, tokens, device posture, federation, and policy.
IAM97 is designed to simplify these complex systems without diluting their technical accuracy. The goal is to help security leaders, architects, auditors, and learners understand how identity systems actually work and how attackers abuse them.
Featured IAM97 Articles
Kerberos Is Not Just Authentication
A deep explanation of Kerberos as a three-headed cryptographic trust system involving the Authentication Server, Ticket Granting Server, service tickets, session keys, KRBTGT, and application access.
Read Kerberos ArticleSAML — The Federated Trust Engine
A practical explanation of SAML as an inter-domain authentication protocol using Identity Providers, Service Providers, signed assertions, ACS endpoints, replay checks, audience validation, and federation trust.
Read SAML ArticleUpcoming IAM97 Topics
IAM97 will evolve into a structured identity security knowledge base covering protocol flows, attacks, controls, and CISO-level implementation guidance.
From Identity Trust to Contractual Trust
IAM97 explains how digital trust works inside enterprise systems. Contract97 applies a similar intelligence mindset to contracts by extracting security obligations from legal agreements and converting them into structured control intelligence.
Explore Contract97