Looking for standards for interfaces

We already touched on the subject when we talked about the software layer, but choosing norms and standards is of such great importance when designing or modernizing an information system that a dedicated section is not too much.

OIDC, together with OAuth 2.0 and JWT, is the obvious choice for authorization and identification management, as it has become the de-facto standard nowadays. SAML, though still quite used in the industry, definitely lost the battle to OIDC for modern uses such as single-page applications and API management. Still, on the identification function, the System for Cross-Domain Identity Management (SCIM) specification could have been used to manage identity information, but it would be overkill for such a small organization. SCIM is only useful when one needs to manage lots of attributes on users. If we were to embed the organizational chart in the IAM, though, it would definitely be with SCIM 2.0 Enterprise User Extension...