Manish S.

I'm an Enterprise Identity Architect with 22+ years of experience designing and implementing authentication and identity solutions for enterprise applications and SaaS platforms. My work ranges from architecture and implementation to troubleshooting production issues and helping engineering teams modernize their identity infrastructure. I have hands-on experience with industry-leading identity platforms including Keycloak, Auth0, ForgeRock, Ping Identity, Microsoft Entra ID (Azure AD), Okta, OneLogin and Spring Authorization Server. Whether the requirement is implementing a new SSO solution, integrating an existing identity provider, migrating between platforms, or reviewing an enterprise IAM architecture, I focus on building solutions that are secure, scalable and maintainable. My areas of expertise include: OAuth 2.0 OpenID Connect (OIDC) SAML 2.0 Identity Federation Enterprise SSO MFA and Passwordless Authentication SCIM Provisioning Active Directory and LDAP Integration API Security JWT and Token Architecture Multi-tenant SaaS Security Kubernetes-based IAM Deployments Identity Architecture Reviews Performance and Scalability Over the last few years I've also been building my own cloud-native IAM platform, ClavionX, implementing an OAuth Authorization Server, OpenID Connect Provider, SAML Identity Provider, MFA, tenant isolation, runtime/control plane architecture and enterprise administration capabilities. Building an identity product from the ground up has given me practical experience beyond configuring existing IAM products. I'm also actively working in the emerging area of Identity for AI. This includes: Agent Identity Authentication and Authorization for AI Agents Securing MCP Servers Securing MCP Clients and Agents OAuth for AI Applications Enterprise AI Security Architecture AI Gateway Security Identity-aware AI Integrations I enjoy working on challenging architecture problems, production troubleshooting, security reviews and modernizing identity platforms. Whether you need help with Keycloak, Auth0, Entra ID, OAuth, SAML, cloud-native identity or securing AI applications, I'd be happy to discuss your project.