Skip to content

Start free trial

Praxis

Learn it. Build it. Run it.

Lessons to learn from, notes and docs to build with, runbooks and terms to run on. One place, one search.

Lessons and tracksLearnThree-minute interactive lessons.14 lessons6 tracksOpen Docs, API and field notesBuildProtocol notes and longer reads.SAMLOIDCSCIM14 notesOpen Runbooks and lexiconRunChecklists to finish, terms in plain English.6 runbooks78 termsOpen

The learning map

Six tracks. Rings fill as you finish lessons. Progress stays in this browser only.

Foundations
How sign-in works and who may do what.
What happens when you sign in3 min Who you are, and what you may do3 min
Passwordless
Passkeys, factors and strong re-checks.
Why a passkey cannot be phished3 min Pick factors, watch the risk move3 min Step-up before the risky click3 min
Provisioning
Joiners, movers and leavers, automated.
A leaver, end to end3 min Build a SCIM PATCH3 min Joiner, mover, leaver: access that follows HR3 min
Compliance
Evidence and DPDP-oriented routines.
DPDP: who is who in your identity data3 min Read the log: who still had access?3 min
Security operations
Logs that cannot be quietly rewritten.
Tamper-evident logs: a hash chain3 min Verify a signed webhook3 min
Engineering
Tokens and flows, read by hand.
Decode a token by hand3 min PKCE playground3 min

Latest field notes

Merging two directories after an acquisitionMerging two directories safely means matching people on verified keys, never on names alone, and migrating in stages with a way back.Identity & access Provisioning6 minDeep Access reviews that auditors acceptAn access review is a process, and the evidence matters as much as the decisions. Scope it, assign named reviewers, record decisions and keep the proof in one folder.Compliance Security operations5 minPractical Implementing OpenID Connect with PKCE correctlyAuthorization code with PKCE is the recommended flow for web, mobile and single-page apps. Generate a verifier, send its hash, and check state, nonce, signature, issuer, audience and expiry on return.Engineering6 minDeep