{"version":"0.2.0","built_at":"2026-10-10T20:58:14.188Z","license":"CC BY 4.0 © Mike Reams","canonical":"https://catalog.mikereams.com","capability":{"id":"BC-760.20","name":"Identity & Access Management","level":2,"parent_id":"BC-760","l1_id":"BC-760","industry":"cross-industry","macro_id":"MC-70","path":["Cybersecurity","Identity & Access Management"],"description":"Know who and what is accessing enterprise systems, grant only the access each needs for as long as they need it, and make privileged access rare, recorded and reviewed.","aliases":["IAM","Access Control","Identity Governance"],"in_scope":["Identity lifecycle from joiner to leaver","Authentication and single sign-on","Access requests with certification and revocation","Privileged and machine identity control"],"out_of_scope":["HR system of record for employees (see BC-360)","Customer account registration flows (see BC-460)"],"csdm_note":null,"status":"active","successor_id":null,"child_ids":["BC-760.20.10","BC-760.20.20","BC-760.20.30","BC-760.20.40"]},"crosswalk":{"realized_by":[{"product_id":"PR-110","product":"SAP S/4HANA","pc_id":"PC-110.90","pc":"Governance, Risk and Compliance","maturity":"partial","via":"BC-760.20.30"},{"product_id":"PR-140","product":"Microsoft 365","pc_id":"PC-140.50","pc":"Microsoft Entra ID","maturity":"strong","via":"BC-760.20.10"},{"product_id":"PR-150","product":"Oracle Fusion Cloud Applications","pc_id":"PC-150.70","pc":"Risk Management and Compliance","maturity":"partial","via":"BC-760.20.30"},{"product_id":"PR-190","product":"Okta","pc_id":"PC-190.10","pc":"Universal Directory","maturity":"core","via":"BC-760.20.10"},{"product_id":"PR-190","product":"Okta","pc_id":"PC-190.20","pc":"Single Sign-On","maturity":"core","via":"BC-760.20.20"},{"product_id":"PR-190","product":"Okta","pc_id":"PC-190.30","pc":"Adaptive Multi-Factor Authentication","maturity":"core","via":"BC-760.20.20"},{"product_id":"PR-190","product":"Okta","pc_id":"PC-190.40","pc":"Lifecycle Management","maturity":"strong","via":"BC-760.20.10"},{"product_id":"PR-190","product":"Okta","pc_id":"PC-190.50","pc":"Identity Governance","maturity":"partial","via":"BC-760.20.30"},{"product_id":"PR-190","product":"Okta","pc_id":"PC-190.60","pc":"Privileged Access","maturity":"emerging","via":"BC-760.20.40"},{"product_id":"PR-190","product":"Okta","pc_id":"PC-190.70","pc":"Customer Identity","maturity":"strong","via":"BC-760.20.20"}],"used_in":[{"vs_id":"VS-40","vs":"Hire-to-Retire","stage_id":"VS-40.30","stage":"Offer & Onboard","order":3,"via":null},{"vs_id":"VS-40","vs":"Hire-to-Retire","stage_id":"VS-40.60","stage":"Separate & Offboard","order":6,"via":null}],"patterns":[{"id":"DP-340","name":"Zero Trust","category":"Security","via":null},{"id":"DP-350","name":"Secrets Management","category":"Security","via":"BC-760.20.40"},{"id":"DP-360","name":"Federated Identity","category":"Security","via":"BC-760.20.20"}],"stacks":[{"id":"TS-080","name":"Workforce identity stack","layer":"Identity","via":null}],"books":[{"id":"BK-building-secure-and-reliable-systems","title":"Building Secure and Reliable Systems","topic":"Security","via":null},{"id":"BK-zero-trust-networks","title":"Zero Trust Networks","topic":"Security","via":null}]},"ancestors":[{"id":"BC-760","name":"Cybersecurity","level":1}],"children":[{"id":"BC-760.20.10","name":"Identity Lifecycle","level":3,"child_count":0},{"id":"BC-760.20.20","name":"Authentication","level":3,"child_count":0},{"id":"BC-760.20.30","name":"Access Governance","level":3,"child_count":0},{"id":"BC-760.20.40","name":"Privileged Access Management","level":3,"child_count":0}]}