Authorization Mechanisms, Provisioning Lifecycle, and Authentication Systems

Introduction

This lesson covers tasks 5.4, 5.5, and 5.6 of Domain 5, Identity and Access Management (IAM) (13% of the exam, ISC2 exam outline effective 15 April 2024): implement and manage authorization mechanisms, manage the identity and access provisioning lifecycle, and implement authentication systems. The previous lesson dealt with how a subject proves who it is. This lesson deals with what happens next: what the authenticated identity is allowed to do, how accounts and entitlements are created, changed, reviewed and removed, and which protocols carry authentication and authorization across systems.