Skip to content

Commit

Permalink
Update iam-functions-list.adoc
Browse files Browse the repository at this point in the history
  • Loading branch information
khazelton authored May 17, 2021
1 parent 3db62fa commit 49868fe
Showing 1 changed file with 34 additions and 29 deletions.
63 changes: 34 additions & 29 deletions iam-functions-list.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -2,16 +2,21 @@

*User management, user concerns*

identity registration, enrollment,
identity proofing
credentialing
account validation
attribute verification

identity resolution
progressive profiling

self-service identity management, credential binding, password management, profiling, preferences, account linking
identity registration, enrollment +
identity proofing +
credentialing +
account validation +
attribute verification +

identity resolution +
progressive profiling +

self-service identity management +
credential binding +
password management +
profiling +
preferences +
account linking +

consent and privacy protection

Expand All @@ -21,34 +26,34 @@ support for multiple identity records (and credentials) for a single person

*IAM Capabilities*

multiple AuthN sources and styles, (local SSO, social, federated, protocol gateways),
password and MFA management
session mgmt, logout
multiple AuthN sources and styles, (local SSO, social, federated, protocol gateways) +
password and MFA management +
session mgmt, logout +

access policy management (coarse and fine grained)
Access Mgmt admin, (distributable)
request/approval processes
lifecycle transitions definition and admin
access policy management (coarse and fine grained) +
Access Mgmt admin, (distributable) +
request/approval processes +
lifecycle transitions definition and admin +

service accounts
apps, services as credentialed agents for invoking other services, apis
service accounts +
apps, services as credentialed agents for invoking other services, apis +

API management
API access to all IAM functionality
api authNZ, registry, gateway, specifications, style guidelines
API management +
API access to all IAM functionality +
api authNZ, registry, gateway, specifications, style guidelines +

provisioning, deprovisioning,
messaging and api integration with connected apps & services, app integration
batch reconciliation, near real time sync between registry and connected systems
auditing, logging, reporting, attestation
provisioning, deprovisioning +
messaging and api integration with connected apps & services, app integration +
batch reconciliation, near real time sync between registry and connected systems +
auditing, logging, reporting, attestation +

- - -

*Data Management*

directory services
IAM data dictionary
identity and entitlement data access
directory services +
IAM data dictionary +
identity and entitlement data access +

- - -

Expand Down

0 comments on commit 49868fe

Please sign in to comment.