Access Control, Identification, Authentication, and Federation

Introduction

This lesson covers tasks 5.1, 5.2, and 5.3 of Domain 5, Identity and Access Management (IAM) (13% of the exam, ISC2 exam outline effective 15 April 2024): control physical and logical access to assets, manage identification and authentication of people, devices, and services, and federate identity with a third-party service. The next lesson covers authorization mechanisms, the provisioning lifecycle, and authentication systems (tasks 5.4-5.6).