Identity & Access Management

Canonical URL: https://babadook.tech/modules/identity-access-management
Entity: modules
Content hash: 9e2f05843526e0809aeb3aa729566966bc5260b851fd83482a7757103db45f02

Enterprise identity platform with SSO (SAML/OIDC), role-based access control with attribute-based policies, multi-factor authentication, and session management.

Enterprise identity platform with SSO (SAML/OIDC), role-based access control with attribute-based policies, multi-factor authentication, and session management.

identity-across-every-dxp-service

Identity Across Every DXP Service Identity & Access Management provides a unified identity layer across all DXP products. Single sign-on via SAML 2.0 and OpenID Connect integrates with enterprise identity providers (Okta, Azure AD, Auth0, OneLogin). RBAC with attribute-based policies enables granular permission control at the resource level. Multi-factor authentication supports TOTP, WebAuthn/FIDO2, and SMS with a deprecation path. Session management handles token lifecycle, concurrent session limits, and forced logout across devices.

data Viz

IAM Specifications

- SSO: SAML 2.0, OpenID Connect, LDAP, Active Directory
- RBAC: Role-based with attribute-based policy extensions
- MFA: TOTP, WebAuthn/FIDO2, SMS
- Sessions: JWT with refresh rotation, configurable TTL
- Providers: Okta, Azure AD, Auth0, OneLogin, custom OIDC

features

mfa: true

sso: true

abac: true

rbac: true

session management: true

Relationships

products

- DXP — https://babadook.tech/products/dxp

capabilities

- Enterprise Security — https://babadook.tech/capabilities/enterprise-security

sub modules

- Security & Compliance — https://babadook.tech/sub-modules/security-compliance