Identity & Access Management

Ensuring the right people have the right access at the right time

Subdomains

Topics

Lessons

MFA methods, passwordless authentication, FIDO2/WebAuthn, certificate-based auth, and biometrics.

RBAC, ABAC, conditional access policies, least privilege, and just-in-time access.

Identity stores (AD, LDAP, Entra ID), directory design, identity federation, and SSO frameworks.

Provisioning, deprovisioning, joiner-mover-leaver workflows, identity governance, and access reviews.

Service principals, managed identities, workload identity federation, SPIFFE/SPIRE, and API key management.

PAM vaulting, session recording, just-in-time elevation, service account governance, and break-glass procedures.