👋 Ciao! I’m Fabio, a Solutions Engineer specialized in 🔐 Identity & Access Management (IAM). I work between France 🇫🇷 and Italy 🇮🇹 for Okta.
📚 In this space, I share ideas, experiences, and insights about the world of digital identity.
🌍 Although this site is multilingual and some posts are also in Italian and French, most content is in English. To see everything, pick English as your language.
Explore four access patterns for securing AI agent integrations: Cross App Access (XAA) with user context based on ID-JAG, Secure Token Service for third-party APIs, Pre-Shared Keys and Service Accounts for legacy systems, each designed for specific security and compliance requirements.
Opaflix is an open-source tool to browse and replay Okta Privileged Access (OPA) SSH and RDP session recordings from AWS S3. Supports single-tenant and multi-tenant deployments, advanced search, infrastructure graph, and OIDC Authentication.
Okta’s Showcase 2026 unveils the Agentic Enterprise Blueprint: a comprehensive framework to discover, govern, and secure AI agents as first-class identities, addressing the emerging shadow AI crisis and regulatory compliance requirements.
A comprehensive guide to modernizing IBM i (AS/400) security by integrating Okta. This post covers MFA for terminal access using Precisely and explores two options for Lifecycle Management (LCM): the Okta OPP agent with custom scripts and the Aquera SCIM gateway.
How to integrate GLPI 11, an open-source IT service management platform, with Okta for SSO. It covers running a GLPI test environment via Docker, LDAP and SAML configuration walkthroughs, and notes on OAuth/OIDC with commercial plugins. The guide highlights user import, authentication options, demo readiness, and security limitations for non-production use.
Introduction # This guide provides a step-by-step walkthrough for deploying the OpenLDAP directory service, and integrate it with Okta, using Docker and Docker Compose.
Warning This article was written in October 2025. In February 2026 Okta added Docker support to the official GitHub repository, so you can now use the official Docker image instead of building your own. I will keep this article as it can be useful for learning how to set up the MCP Server in different environments, and for testing the HTTP Gateway, which is not available in the official image.
Who will guard the guards themselves? A critical analysis of vendor lock-in risks in IAM and the advantages of an agnostic approach based on Identity Fabric and open standards.
Analysis of 2024 banking cyber incidents (+45%) according to Banca d’Italia report and the Identity Fabric strategy for operational resilience in the Italian and European financial sector.
