https://www.akku.work/blog/flexible-identity-iam-solutions-need-to-bend-a-little-at-least/