Hi, I'm Tushar 👋

Thoughts on Security,
Nature & Sustainable Cities

I work in Identity and Access Management, watch birds whenever I can, and think a lot about how cities could be built better. This is where those ideas land.

About me → RSS Feed

What I write about

🔐
Identity & Access Management

Deep dives into OAuth, SAML, Zero Trust, and enterprise IAM architecture. Practical guides, diagrams, and lessons from the field.

Read IAM posts →
🐦
Birds & Conservation

Field notes, species journals, photography from Indian habitats, and thoughts on ecological sustainability and conservation.

Read Birds posts →
🏙️
Sustainable Cities

Planning frameworks, transit-oriented development, and how Indian cities can learn from global examples to build more liveable futures.

Read Cities posts →

🔐 Latest IAM

View all →
NHI Governance at Scale — Discovery, Ownership, and Policy for the 90:1 World
Jun 7, 2026
Building Secure AI Agent Systems — A Practical Architecture Guide
Jun 6, 2026
Agentic Identity Protocols — OAuth 2.1, MCP, A2A, CIBA, OIDC-A, and the Delegation Chain Problem
Jun 5, 2026
Consumer Agents and the Consent Problem — When AI Acts on Behalf of Your Customers
Jun 4, 2026
The Legacy Backend Problem — LDAP, SQL, and Why Your IAM Foundation Is Holding Back Agentic Identity
Jun 3, 2026
Three Generations of IAM Tools — and Why None of Them Were Built for the Agentic Era
Jun 2, 2026
Agentic Identity — The New Frontier
Jun 2, 2026
IAM for the Agentic Era — Series 2
Jun 1, 2026
Non-Human Identities (NHI) — The Hidden Attack Surface (Service Accounts, API Keys, Certificates, OAuth Tokens at Scale)
May 27, 2026
Zero Trust — Why "Trust but Verify" Is Dead
May 25, 2026
IAM Deployment Models — Cloud-Native, Hybrid, On-Premises: What Changes and What Stays the Same
May 23, 2026
PAM Deep Dive — Vault Architecture, JIT Access, and Session Recording
May 21, 2026
Access Reviews — The Operational Heart of IAM Governance
May 19, 2026
IGA Deep Dive — Provisioning, Role Engineering, and Segregation of Duties
May 17, 2026
OAuth 2.0 and OpenID Connect — The Protocols Behind 'Sign in with Google'
May 14, 2026
SAML 2.0 — How Enterprise Single Sign-On Really Works
May 11, 2026
Authentication Deep Dive — Passwords, MFA, Passkeys, and What Happens After You Log In
May 8, 2026
Who Are Your Users? Identity Relationship Models Every IAM Architect Must Understand
May 5, 2026
Beyond the Employee — Every Type of Identity Your IAM program Must Manage
May 2, 2026
What Is IAM and Why Every Organisation Needs to Get It Right
May 1, 2026
IAM from First Principles - Series 1
May 1, 2026