Changing CIAM without changing the bank
The CIAM Migration Diary, Part 2: the rule we set ourselves and where it did not quite work.
Ajit Gupta
Read the article →Insights
Practitioner thinking, from the people doing the work.
Writing on agentic AI governance, identity as the control plane, Keycloak and zero-downtime engineering. No gated downloads.
Latest articles
Recent writing
Platform consolidation: the new board-level priority in financial services identity
Leading institutions are consolidating identity capabilities onto strategic platforms, reducing overlap and the cost of change.
Midships
Read the article →Caravel and Icebreaker: accelerating AI-led delivery while enabling trust in autonomous agents
How AI-led software delivery and runtime governance for agents fit together.
Midships
Read the article →The OpenAI and Hugging Face incident is unnerving. But perhaps not for the reason you think.
What the agent escape incident does and does not mean for regulated enterprises.
Ajit Gupta
Read the article →Singapore's financial industry has named the runtime governance gap in agentic AI. Here is how we close it.
A practitioner's reading of the SAFR industry white paper on agentic finance at runtime.
Ajit Gupta
Read the article →KubeCon Mumbai 2026: what it meant for Midships
Lessons from the CNCF community on Keycloak and cloud-native identity.
Midships
Read the article →Archive
Every article, newest first.
95 articles on identity, Keycloak, ForgeRock and Ping engineering, and governed AI.
2026
- Changing CIAM without changing the bankAjit Gupta
- Platform Consolidation: The New Board-Level Priority in Financial Services IdentityMidships
- Caravel and Icebreaker: Accelerating AI-Led Delivery While Enabling Trust in Autonomous AgentsMidships
- The OpenAI and Hugging Face incident is unnerving. But perhaps not for the reason you think.Ajit Gupta
- Singapore’s financial industry has named the runtime governance gap in agentic AI. Here is how we close it.Midships
- KubeCon Mumbai 2026: What It Meant for MidshipsMidships
- Why I still need a team, and why I want a team of architectsAjit Gupta
- Customer Intent Driven Workflow Will Change How Organisations Are StructuredAjit Gupta
- What do you have to lose?Ajit Gupta
- Designing Secure Authentication Journeys with Keycloak: Tokens, Sessions, Revocation, and Step-Up FlowsAjit Gupta
- Why Autonomous Agents Are Driving A New Generation Of Enterprise GovernanceYuxiang Lin
- What I Stopped ChasingAjit Gupta
- From Console to GitOps: Operating Keycloak as a Governed Cloud-Native Identity PlatformAjit Gupta
- Keycloak at Production Scale: High Availability Patterns for Regulated Cloud-Native PlatformsAjit Gupta
- Scope Integrity, Proof-of-Possession, and Enforceable Token Exchange for Agentic AI SystemsAjit Gupta
- A year on from embracing AI. What I actually think now.Ajit Gupta
- Delegated Human Context Across Agent-to-Agent ChainsAjit Gupta
- Why Workload Identity Alone Is Not Enough for AI AgentsMayank Soni
- From Console to Compliance: Operating Keycloak as a Regulated, API-Driven Identity PlatformMayank Soni
- The governance gap Anthropic just exposed.Ajit Gupta
- Scaling Identity to Millions: Session, Token, and Cache Design in KeycloakMayank Soni
- Intent-based governance is not what most vendors are sellingAjit Gupta
- Designing Financial-Grade Identity: High-Availability Patterns for Keycloak on KubernetesMayank Soni
- Mythos, Fear, and What Good Security Architecture Already Tells YouAjit Gupta
- Human in the Loop is Necessary. It Cannot Be the Destination.Ajit Gupta
- Why Red Hat Keycloak Is Not What You Think "Open Source" MeansAjit Gupta
- Your Permissions Model Was Not Built for AI AgentsAjit Gupta
- McKinsey's AI Got Hacked in Two Hours. Here's What That Actually Means.Ajit Gupta
2025
- Reimagining Identity for the Age of Intelligent SystemsYuxiang Lin
- Proactive Incident Management: The Midships Guardian ApproachAjit Gupta
- Understanding Passkeys: The Future of Passwordless AuthenticationAjit Gupta
- WebAuthn (Web Authentication)Ajit Gupta
- LDAP/AD federationAjit Gupta
- When (and How) to Choose Keycloak, and Why to Partner with MidshipsAjit Gupta
- The Role of Midships in Identity ManagementAjit Gupta
- The Benefits of Regularly Updating Tooling: A Technical PerspectiveTaweh Ruhle
- Identity Providers are Becoming Commodities: It's Time to Shift FocusPaul McKeown
- Hybrid CIAM Architecture With ID CloudMidships
- Designing CIAM For Retail Banking: All The Core Journeys You'll NeedYuxiang Lin
- Kubernetes Outage and RecoveryTaweh Ruhle
- Agentic AI: Navigating the New Frontier of Data Purpose GovernancePaul McKeown
- Universal CIAM: Simplifying Identity Management Across Channels and RegionsYuxiang Lin
- Extreme Performance Tuning for Spiky Gaming TrafficMidships
- Rapid CIAM Incident Recovery and Post-Incident EnhancementsRavi Varma Baru
- Plan Your Cloud Journey with Midships’ Free Cloud Migration AssessmentPaul McKeown
- Exceeding Transaction Requirements and Achieving Near-Zero RTO/RPO for a Major Asian Gaming ProviderMidships
- Biometric Verification: An Ancient Tradition in a Modern WorldMidships
2024
- Without a strong Ops capability you will fail your customers… (Part 1)Midships
- IS IDENTITY AS A SERVICE (IDAAS) RIGHT FOR ME?Taweh Ruhle
- Optimise Your Directory ServiceMidships
- Agent Verification: A low cost and simple approach to battle Social Engineering!Midships
- Midships’ Approach To Digital Transaction SigningYuxiang Lin
- SCA using Dependency Track (with AWS CDK Deployment Template)Midships
- Midships: Our Distinctive Consulting MethodologyAjit Gupta
- AI and ML are not the answer to everything!Yuxiang Lin
2023
- Performance Testing ForgeRock with K6 (for beginners :-))Debasis Dwivedy
- Maintaining ForgeRock Blog Series: ForgeRock ChangeLogs are not purging what do I do?Taweh Ruhle
- Using Forgerock IDM Livesync to maintain data synchronicity during an upgradeRavi Varma Baru
2022
- Are you prepared to risk burn out for Accelerated Growth?Ajit Gupta
- Communicating with ForgeRock Directory Service over RESTDebasis Dwivedy
- Implementing STDOUT Logging for ForgeRock StackAhmed Saleh
2020
- How prefabricated technical foundations can deliver lower cost and predictable business solutionsAjit Gupta
- Control & optimise your Cloud resources or risk opening Pandora’s Box!Ajit Gupta
- Midships Webinars 2021: ForgeRock SeriesMidships
- Zero-downtime ForgeRock Rolling UpdatesJuan Redondo
- USING KAFKA TO FACILITATE MONGODB DATA REPLICATION TO ACHIEVE AN RPO OF ZEROTaweh Ruhle
- Kubernetes Auto-ScalingAjit Gupta
- OIDC (OpenID Connect)Ajit Gupta
- SAMLAjit Gupta
- OAuth2Ajit Gupta
- Fraud ControlsAjit Gupta
- Identity StrategyAjit Gupta
- Cloud MigrationAjit Gupta
- Hybrid IdentityAjit Gupta
- KeycloakAjit Gupta
- Adaptive SecurityAjit Gupta
- KubernetesAjit Gupta
- Infrastructure-as-Code (IaC)Ajit Gupta
- Zero Downtime IAMAjit Gupta
- IAM JourneysAjit Gupta
- ABACAjit Gupta
- RBACAjit Gupta
- FIDO2Ajit Gupta
- MFA (Multi-Factor Authentication)Ajit Gupta
- Behavioral BiometricsAjit Gupta
- Zero TrustAjit Gupta
- IAM (Identity and Access Management)Ajit Gupta
- CIAM (Customer Identity and Access Management)Ajit Gupta
- eKYC (Electronic Know Your Customer)Ajit Gupta
- Configuring Passwordless Biometric Authentication on ForgeRockJuan Redondo
- How to keep your ForgeRock configuration secure when deploying to KubernetesJuan Redondo
- Deploying a Highly Available ForgeRock Stack on KubernetesJuan Redondo
- So you want to deploy the ForgeRock User Store on Kubernetes?Ajit Gupta
- Backup your containerised ForgeRock User Store reliably today!Juan Redondo
- Stretched / Multi Zone Cluster ConsiderationsAjit Gupta