Gian Luca Frei6 min read
Inside Headless CIAM: Building an API-First Identity Layer
Learn how to build a secure headless CIAM layer with API-first identity to power custom login and registration journeys with full control.
Read article.jpg)
Blog
Notes on security & AI.
Research, product updates, and practical guidance for teams securing modern applications, APIs, infrastructure, and cloud environments.
Gian Luca Frei7 min read
Practical IAM Migration Strategies for High-Scale User Bases
Learn proven steps and pitfalls to avoid when migrating 10M+ users, including data mapping, phased cutovers, and testing for secure IAM rollouts at scale.
Read article
Gian Luca Frei7 min read
How QR Code Login Supercharges Mobile-First Authentication
Discover how QR code login boosts mobile-first authentication with secure, low-friction access, better UX, and support for custom enterprise CIAM journeys.
Read article
Gian Luca Frei7 min read
Understanding Private Cloud CIAM for Modern SaaS Teams
Learn how private cloud CIAM improves security, compliance, and user experience for modern SaaS teams with flexible, cloud-native authentication flows.
Read article
Gian Luca Frei2 min read
AI for Development
At IdentityPlane, we don't treat AI as a futuristic replacement for developers; we use it as a powerful co-pilot to write high-quality, cloud-native security software faster. Our focus is simple: leverage AI to improve our code quality and enjoy the speed benefits that come with it.
Read article
Gian Luca Frei4 min read
Swiss E-ID Beta, a First Look
In this post we explore how the verification process of the Swiss E-ID works with the swiyu wallet and break down the OID4VP (OpenID) request codes used to check credentials. Step-by-step we go through the steps for developers to build their own local proof-of-concept (PoC) verifier using Docker, including how to register a DID in the SWIYU system. Finally, we analyze the communication flow and discuss a potential security weakness found during testing.
Read article
Gian Luca Frei4 min read
Swiss E-ID: Issuing Credentials
A technical walkthrough on Swiss E-ID credential issuance. This guide details setting up the swiyu-issuer service, issuing a custom VC via OID4VCI, and testing a verifier security flaw by spoofing a betaid-sdjwt credential.
Read article