# Identity & Access Management

Canonical URL: https://babadook.tech/modules/identity-access-management
Entity: modules
Content hash: 9e2f05843526e0809aeb3aa729566966bc5260b851fd83482a7757103db45f02

Enterprise identity platform with SSO (SAML/OIDC), role-based access control with attribute-based policies, multi-factor authentication, and session management.

Enterprise identity platform with SSO (SAML/OIDC), role-based access control with attribute-based policies, multi-factor authentication, and session management.

## identity-across-every-dxp-service

Identity Across Every DXP Service Identity & Access Management provides a unified identity layer across all DXP products. Single sign-on via SAML 2.0 and OpenID Connect integrates with enterprise identity providers (Okta, Azure AD, Auth0, OneLogin). RBAC with attribute-based policies enables granular permission control at the resource level. Multi-factor authentication supports TOTP, WebAuthn/FIDO2, and SMS with a deprecation path. Session management handles token lifecycle, concurrent session limits, and forced logout across devices.

### data Viz

## IAM Specifications

- **SSO:** SAML 2.0, OpenID Connect, LDAP, Active Directory
- **RBAC:** Role-based with attribute-based policy extensions
- **MFA:** TOTP, WebAuthn/FIDO2, SMS
- **Sessions:** JWT with refresh rotation, configurable TTL
- **Providers:** Okta, Azure AD, Auth0, OneLogin, custom OIDC

## features

mfa: true

sso: true

abac: true

rbac: true

session management: true

## Relationships

### products

- DXP — https://babadook.tech/products/dxp

### capabilities

- Enterprise Security — https://babadook.tech/capabilities/enterprise-security

### sub modules

- Security & Compliance — https://babadook.tech/sub-modules/security-compliance