KBIdentity Bytes Knowledge Base — plain-English explainers behind every lab track.HomeLabs
Home › Knowledge Base
Knowledge base

Understand every topic before you run the lab

Ten in-depth articles — one per track — explaining the concepts, protocols and controls the labs put into practice. Written as plain-English explainers and marked up with FAQ structured data for search.

Track 018 answers
Article

IAM Foundations

The IAM Foundations track builds the vocabulary and mental model every later Identity Bytes lab assumes. These questions cover the concepts you meet in the first six labs, in the order they tend to come up.

identity and access managementIAM basicsauthentication vs authorization
Track 028 answers
Article

Entra ID Security

The Entra ID Security track is a twelve-lab hardening programme for a Microsoft Entra tenant. These questions explain the controls you configure across the track and why the order matters.

Microsoft Entra IDEntra ID securityConditional Access
Track 038 answers
Article

Identity Standards

The Identity Standards track gives you vendor-neutral fluency in the protocols every identity system speaks. These answers explain what each standard is for and the mistakes the labs teach you to avoid.

OAuth 2.1OpenID ConnectOIDC
Track 047 answers
Article

SSO and Federation

The SSO and Federation track shows how enterprises stitch identity providers and applications together. These answers cover the sign-on patterns and the pitfalls the labs walk you through.

single sign-onSSOidentity federation
Track 057 answers
Article

Privileged Access

The Privileged Access track is deliberately vendor-neutral — you learn the tradecraft, not one product's console. These answers explain the PAM concepts the labs put into practice with Vault and SSH.

privileged access managementPAMjust-in-time access
Track 067 answers
Article

ZTNA and Network Trust

The ZTNA track replaces implicit network trust with identity-aware access. These answers explain the zero-trust model the labs implement with Teleport and a full reference architecture.

zero trust network accessZTNAZTNA vs VPN
Track 077 answers
Article

Cloud and Kubernetes Identity

The Cloud and Kubernetes Identity track covers how the major platforms model identity. These answers explain the primitives the labs use across AWS, GCP and Kubernetes.

AWS IAMIAM roles vs userspermission boundaries
Track 087 answers
Article

Entra and Microsoft Security

The Entra and Microsoft Security track covers enterprise-scale Entra and its security integrations. These answers explain the governance and detection concepts the labs put to work.

Entra ID governanceentitlement managementaccess packages
Track 097 answers
Article

Governance and Lifecycle

The Governance and Lifecycle track is about keeping access correct over time. These answers explain the IGA concepts the labs implement across HR, the identity provider and downstream apps.

identity governanceIGAjoiner mover leaver
Track 107 answers
Article

Observability and SIEM

The Observability and SIEM track turns identity logs into detections that survive an audit. These answers explain the monitoring concepts the labs build with Grafana and Wazuh.

SIEMidentity observabilityGrafana dashboards