From b8744ff637c1e7a8e29e18d34c30f1320f71a4b3 Mon Sep 17 00:00:00 2001
From: Keith Hazelton <khazelton@gmail.com>
Date: Sun, 14 May 2023 13:43:02 -0500
Subject: [PATCH] MBProMax

---
 .DS_Store               | Bin 6148 -> 10244 bytes
 iam-func-list.adoc      |  76 ++++++++++++++++++++++++++++++++
 iam-functions-list.adoc |  93 +++++++++++++++++++++-------------------
 3 files changed, 124 insertions(+), 45 deletions(-)
 create mode 100644 iam-func-list.adoc

diff --git a/.DS_Store b/.DS_Store
index 5a4971daa2c459615f3d60a7a8777a2e40ff96eb..786a6276637cb313d9e595c5c278ebaa74235cb5 100644
GIT binary patch
literal 10244
zcmeHMYitx%6uxKrV1^EKS~}43nr+qxLV<1t3PE7|Ld%;zXep2F?9R|mn4MX6X18EP
z7yM-k#8-^*LG+hmlo+E%)PEwVQGaNCV2m+FjWH@F8h>HpxpQY>mx4bGF=*x{_nv#t
z<DR+SoO5UIT|x-7X0!+)Awmd`l~PH><_d+%X`N6wpHqbt(4Lq>k?w?@Oij=X7y$wS
z0s#U60s#U60@n)y_|2w;uV6H20|WvD0t7B1K=+3bR!XBj%`xh29oTqB0HmeJ_6qhT
z+CdufY1F4VMp1$Vm?=_b3jPrTm^t!8zFyR)IYyZ|0srs;zGv`HDByX=`9q#MfheOv
z8z2xMFcATIb}uE1$Ph7zTXcROd+|u2ENQp5$4xtqJU*N|;6DEK>6T)-_P6rXaKYWc
z(WlT9{q8}pCee%hmYz6UC@b`PzV3pu;Z5JKZ=19)`Mr|7$ZwgqJCvi>BvEnAI&tD7
zPRd``sd&mX9JjIYQ{YNU%gQJ5llTgLSNE_z((S5l#%Wd4JLss#w#|6Hug13-`bbQw
zX|pX?H7q^t85o+5Dm(iOOS4B>?Tn>4o^3Z1@B%Nyq`J}3NOPni6p2I*HiSkajZ2yu
zLd{De2M-Fo9A3P#E4J56TJ{)43->gC?;}&#_+m?6RMDa|Ct=3%A*n`@pa|))L1lv6
z$+j^xN|xr)_#%&nFu6jUBKP!e>+2U|Qgs%Wy*cF?w&iTo(+<*@ROui*oeA68lGdrb
zFJYURq~*k<s)TALGN$V4EvDIR+^Hk4(n+Lk)7)Y^2AyVmzpL+esceF%f55TRZksn*
zzk%~JEh*#ZT{=!`Wc7BO+Nq%{E+`<JoH}E6{f+Y%FIlmwb?v%M<CRiXwOAuh@5>sF
z5jXYT5kqr_x2sM<w=}~V8o>8sxyBwtPYYGh!1q{cQXj9Dsw!*iWVt^RH}+)=_ka}U
z`SHpssalkkkibi??9|ZzMq8tnnkSKE<p!SLLHTWI9b3j0<$1TDf!gEXLfI7J!bO50
zIX!zZSeU8UbSp1NTCb_bb<<}xFGtq;zAVGqXV%=t3;lTKmc)m4yvJO<MizHdryEqq
z-JH@bU6bD71*R{r>EQVRXIM?^n@2EI^W09J_g)_Isac0+xOUo`ZoMMQ+v#*Inx<?1
zqGfq&7tc!{#U#nFvIZsxzCM;Cd^it(I69wo!%?5*VHu7#vY~*V{5hnFw37{Fkfg~d
zIZ7TSPm`C)+vE)SgnUK5CqI!t0DyxsD2EEDfjOW+2<l-zEPw`B1S_E(I$$ky!4B97
zyC4P{B*6k3_CXfzfgBuyd*MEK5FUbu;So3v&%m>A0$zeQ;5~RBK7bG5Gx!|N!ME@;
z`~v4W;3ji5oXkz<6fVTob75{7*UUw^POgjV;|AHIbNNgh@K@#&PQ^}f!Z}%gd*M!A
zIiZx>@912&{=bt@=cdvWnuaMfBSiCR`Kp$S0m$MtAEJe!??ro2j(E}TMZ{&%I$m2h
zbJlEeuF{L?pzptwnk-fGi7QR=^3&6<7sHBFh6%%a!<)o;id2rt!iEc!g^I*sj<R8+
z(j-bHn1O<)yi{2zN`MJM-L4Q<ic%@&A`WNP&00NI5ha4MSu^Wu#Wtlwz*Lg>YZc??
z$T#E%@+-N3F+LThK`q=2jj#-&7}1+x3v7iR=!M-d2r4AJ$hIK`X>i~!xErJU5FCav
zI10z$es};LgD2ogFTzj2bMQR80I$Mpa0*_Bx8O9KfwS-~#{9?dC42`z!f%&F^2Xvw
zhTkub<iZc}pT~~x^M3#oMSJ1L_-Z;uALJv0)NRom+3vJu+SU;A^I1l9f)XGQAP^uB
zAP^uBAaG3(C}FdN=>31k)&Kv$Ccc760t5mCu1^G@w7t8%6`$>DzqjdKdkE_wR$8cD
zj#1A98}B+EsdpWZ19}}l4=dI6&--3K>hp4pdgiF(nIrv|{tO7t|Ns0#Eja)GFV6pe
E0r3$4NdN!<

delta 270
zcmZn(XfcprU|?W$DortDU=RQ@Ie-{MGjUE#6q~50$jG}fU^gQp?_?eU$v8fd5TFzb
zgC0XVLncE>ZoZ34QcivnNZXfLf8>4k9C1XIPr)l+kYN~{oS$0&)Wg8QUog2@pmXv=
zK{ZvjY#pEg8_<eehD4xMsSL%)R%w=iteWgDA;$(~W=qI3u^rf$n9Z`7or6P=8Ehbf
m05_0!1$kv-;&<lB{3?zhzcMg_d;kPY5YK|eHplbKVFm!|OF9bx

diff --git a/iam-func-list.adoc b/iam-func-list.adoc
new file mode 100644
index 0000000..e792047
--- /dev/null
+++ b/iam-func-list.adoc
@@ -0,0 +1,76 @@
+=== IAM Functions List
+
+- - -
+
+*User Management, User Concerns*
+
+identity registration, enrollment
+idp discovery and selection
+idp of last resort
+identity proofing
+credentialing
+credential binding 
+account validation
+attribute verification
+identity resolution
+support for multiple accounts (and credentials in some cases) for a single identified person
+
+self-service identity management 
+password management 
+profiling
+progressive profiling
+user preferences 
+account linking
+consent and privacy protection
+
+
+- - -
+
+*Native IAM Capabilities*
+
+multiple AuthN sources and services, (local SSO, social, federated, protocol gateways)
+password and MFA management
+
+access policy management (coarse and fine grained)
+access mgmt admin (distributable)
+request/approval processes
+access to services
+lifecycle transitions definition, admin, and automation
+service accounts
+apps, services as credentialed agents for invoking other services, apis
+
+api specification, design, documentation, style guidelines
+api access to all IAM functionality
+api authNZ
+api registry, gateway
+
+session management and logout
+provisioning, deprovisioning
+messaging and api integration with connected apps & services, app integration generally
+batch reconciliation, 
+near real time sync between registry and connected systems
+auditing, logging, reporting, attestation, compliance support
+service provider onboarding and configuration
+
+
+- - -
+
+*Data Management*
+
+directory services
+IAM data dictionary
+identity and entitlement data access
+
+
+- - -
+
+*Deployment Models*
+
+on-prem, cloud, hybrid, hosted
+
+
+- - -
+
+*The ...ities*
+
+scalability, reliability, performance, security, maintainability, other ...ities
diff --git a/iam-functions-list.adoc b/iam-functions-list.adoc
index fda2ca9..6ca13cd 100644
--- a/iam-functions-list.adoc
+++ b/iam-functions-list.adoc
@@ -1,72 +1,75 @@
-=== IAM Functions List
+=== IAM Functions List
 
 - - -
 
 *User Management, User Concerns*
 
-identity registration, enrollment +
-idp discovery and selection +
-idp of last resort +
-identity proofing +
-credentialing +
-credential binding + 
-account validation +
-attribute verification +
-identity resolution +
-support for multiple accounts (and credentials in some cases) for a single identified person +
-
-self-service identity management + 
-password management + 
-profiling +
-progressive profiling +
-user preferences + 
-account linking +
-consent and privacy protection +
+identity registration, enrollment
+idp discovery and selection
+idp of last resort
+identity proofing
+credentialing
+credential binding 
+account validation
+attribute verification
+identity resolution
+support for multiple accounts (and credentials in some cases) for a single identified person
+
+self-service identity management 
+password management 
+profiling
+progressive profiling
+user preferences 
+account linking
+consent and privacy protection
 
 
 - - -
 
 *Native IAM Capabilities*
 
-multiple AuthN sources and services, (local SSO, social, federated, protocol gateways) +
-password and MFA management +
-
-access policy management (coarse and fine grained) +
-access mgmt admin (distributable) +
-request/approval processes +
-access to services +
-lifecycle transitions definition, admin, and automation +
-service accounts +
-apps, services as credentialed agents for invoking other services, apis +
-
-api specification, design, documentation, style guidelines +
-api access to all IAM functionality +
-api authNZ +
-api registry, gateway +
-
-session management and logout +
-provisioning, deprovisioning +
-messaging and api integration with connected apps & services, app integration generally +
+multiple AuthN sources and services, (local SSO, social, federated, protocol gateways)
+password and MFA management
+
+access policy management (coarse and fine grained)
+access mgmt admin (distributable)
+request/approval processes
+access to services
+lifecycle transitions definition, admin, and automation
+service accounts
+apps, services as credentialed agents for invoking other services, apis
+
+api specification, design, documentation, style guidelines
+api access to all IAM functionality
+api authNZ
+api registry, gateway
+
+session management and logout
+provisioning, deprovisioning
+messaging and api integration with connected apps & services, app integration generally
 batch reconciliation, 
-near real time sync between registry and connected systems +
-auditing, logging, reporting, attestation, compliance support +
-service provider onboarding and configuration +
+near real time sync between registry and connected systems
+auditing, logging, reporting, attestation, compliance support
+service provider onboarding and configuration
 
+directory services
+IAM data dictionary
+identity and entitlement data access
 
 - - -
 
 *Data Management*
 
-directory services +
-IAM data dictionary +
-identity and entitlement data access +
+directory services
+IAM data dictionary
+identity and entitlement data access
 
 
 - - -
 
 *Deployment Models*
 
-on-prem, cloud, hybrid, hosted +
+on-prem, cloud, hybrid, hosted
 
 
 - - -