You want into IAM.
Here's the whole path. Start free.
Everybody asks me the same question about IAM — identity and access management — and it's never "what is SAML." It's "where do I start." IAM Essentials is 7 chapters and 36 lessons, sequenced so each one builds on the last. It's the same foundation that sits inside my $249 course. You pay nothing and there's no catch.
Hit send and the course link opens right here. You don't wait on an email for it.
No spam, ever. Unsubscribe anytime.
It isn't that you're not trying.
Everything you need is already out there, and that's the problem. Good material, none of it in order. Vendor docs written for people who already know. Advice that says get a cert, without saying which one or when.
So you study a lot and you can't tell if any of it counts. You open a job posting and can't work out whether you're close or nowhere near. Do that for a few months and you start to wonder if it's you. It isn't. That's not a knowledge gap. That's a sequencing gap, and more material doesn't fix it.
Nobody should have to guess their way in.
Here's everything you walk away with.
Sequenced so each chapter builds on the one before it. Watch it in a week or take a month.
Welcome and Getting Started
2 lessons. Where to start and how to use the course.
Identity Basics & User Lifecycle Management
9 lessons. The CIA triad, AAA, and the joiner, mover and leaver processes that every IAM job is actually built on.
Authentication and MFA
4 lessons. What authentication really is, then a deeper pass on the factors and where MFA fits.
Authorization Models
6 lessons. RBAC, ABAC, PBAC, MAC and DAC. Knowing which one an environment uses, and why, is the thing interviews test.
Federation and Single Sign-On
6 lessons. What federation is, what SSO is, and why people keep using the two words as if they mean the same thing.
IAM + Compliance (NIST 800-63)
7 lessons. The chapter students bring up most. How the guidelines shape identity proofing and what that means on a real project.
Wrap Up
2 lessons. What to do next once you're through it.
Bonus. The IAM career roadmap
The roadmap that used to be a separate paid product. It's included inside the course now.
People who started where you are.
Nobody here came in knowing this. They just started.
"I went from being an IAM incident responder to a principal hybrid identity specialist."
"In the help desk, I was around $60,000 a year. And then going on to my official IAM role, I was in the six figures."
"I cannot thank Andrew enough. I reached out in 2022 with no knowledge about IAM. He was welcoming, coached me, and gave me all the tools I needed to get the foundational knowledge."
"I can definitely vouch for Andrew. Definitely recommend his course as well. It was refreshing when I had my 1:1 with him too! If you are interested in IAM I HIGHLY RECOMMEND his course!"
"Knowing which acronym to use in a specific environment and the why behind it is most important. Andrew's course delivers exactly that kind of practical clarity — not just theory."
The labs got rebuilt. And there are four new ones.
Eight hands-on labs now, every one of them run against a real Authentik stack rather than a screenshot of somebody else's. Reading about a joiner-mover-leaver flow and building one are not the same thing, and only one of them survives an interview question.
Accessing your lab
Your environment, your credentials, and the four services you'll spend the rest of the labs inside.
Joiner, mover, leaver
Drive the full identity lifecycle out of OrangeHRM into Authentik. The flow every IAM analyst runs in production.
Multi-factor authentication
Turn on MFA using the stage Authentik already ships, and learn how not to lock everyone out doing it.
Single sign-on
A real SAML trust between WordPress and Authentik. One login, one click, an account that didn't exist five minutes ago.
Groups and RBAC
Model access by role instead of by person, then prove the model does what you claimed.
Access review and audit
Run a review, pull the evidence, and answer the question an auditor actually asks: who had access, and who said yes.
Onboarding an app with OIDC
Take Grafana from no auth to OIDC against your own identity provider. This is the ticket you'll be handed in week one.
Identity service desk
Lockouts, resets, and the everyday tickets that are most people's first ninety days on an IAM team.
Rebuilt means rebuilt, not reformatted. Every guide got checkpoints so you can tell a step worked before you build the next one on top of it, and troubleshooting for the places people genuinely get stuck rather than the places a writer imagines they might.
See the labsThree steps, and you can stop at any of them.
Most people only ever need the first one. That's fine by me.
Learn the foundation.
IAM Essentials. 7 chapters, 36 lessons, free forever. No card.
Get the free courseGo deep on a product.
Hands-on labs, real scenarios, and the career roadmap. Entra ID, and the IAM Career Launchpad.
See the coursesWork with me directly.
Start with a 30-minute IAM Career Strategy Session. An honest assessment of where you are, and exactly what to do next.
See coachingQuestions, answered.
Is the free course actually free?
Yes — IAM Essentials is free forever, no card required. It's a real 7-chapter course, not a teaser for something else.
Do I need any IAM experience to start?
No. The course teaches the foundation in the order that builds, so you're not expected to already know the vocabulary.
Are the courses self-paced?
Yes. Everything is built around studying evenings and weekends on top of a full-time job — no live sessions to schedule around.
Is this real hands-on work, or just videos?
Depends on the course. The free course teaches the foundation through lessons and walkthroughs — no lab environment. The paid courses ship labs you actually work in, and the Entra labs run in your own tenant.
Who's actually teaching this?
Andrew Chanthaphone, 14+ years in IAM — and reachable directly if you have questions.
Do you guarantee a job or a salary?
No. Results vary based on your effort, background, and the market you're in — nothing here is a guarantee of a job, a salary, or an exam result.
Can I reach you if I get stuck?
Yes — email me directly at andrew@allthingsidentity.com, or book a 1:1 session if you want structured help.
