👋 Ciao! I’m Fabio, a Solutions Engineer specialized in 🔐 Identity & Access Management (IAM). I work between France 🇫🇷 and Italy 🇮🇹 for Okta.
📚 In this space, I share ideas, experiences, and insights about the world of digital identity.
🌍 Although this site is multilingual and some posts are also in Italian and French, most content is in English. To see everything, pick English as your language.
Opaflix is an open-source web application to browse and replay Okta Privileged Access (OPA) SSH and RDP session recordings stored in AWS S3. Supports single-tenant and multi-tenant deployments, advanced search, infrastructure graph, and OIDC Okta Authentication.
Technical deep dive into the Okta On-Prem SCIM Server architecture, REST endpoints, authentication mechanisms, and internal workings. Learn how the SCIM server translates provisioning requests into database operations through reverse-engineered analysis for educational purposes.
A comprehensive guide to modernizing IBM i (AS/400) security by integrating Okta. This post covers MFA for terminal access using Precisely and explores two options for Lifecycle Management (LCM): the Okta OPP agent with custom scripts and the Aquera SCIM gateway.
How to integrate GLPI 11, an open-source IT service management platform, with Okta for SSO. It covers running a GLPI test environment via Docker, LDAP and SAML configuration walkthroughs, and notes on OAuth/OIDC with commercial plugins. The guide highlights user import, authentication options, demo readiness, and security limitations for non-production use.
Introduction # This guide provides a step-by-step walkthrough for deploying the OpenLDAP directory service, and integrate it with Okta, using Docker and Docker Compose.
Warning This article was written in October 2025. In February 2026 Okta added Docker support to the official GitHub repository, so you can now use the official Docker image instead of building your own. I will keep this article as it can be useful for learning how to set up the MCP Server in different environments, and for testing the HTTP Gateway, which is not available in the official image.
Who will guard the guards themselves? A critical analysis of vendor lock-in risks in IAM and the advantages of an agnostic approach based on Identity Fabric and open standards.
Analysis of 2024 banking cyber incidents (+45%) according to Banca d’Italia report and the Identity Fabric strategy for operational resilience in the Italian and European financial sector.
Complete Docker-compose stack for testing Okta RADIUS Agent with OpenVPN AS, including automated MFA test scripts and configuration examples. The guide covers setup, configuration, client IP reporting, supported factors, and security best practices.
