Cloud Security
Identity & Access Management
Enterprise identity lifecycle — JML, SSO, PAM, IGA, Zero Trust.
Eight practical IAM labs: joiner–mover–leaver lifecycle, group provisioning, privileged access (JIT/PAM), SAML/OIDC SSO, AD/LDAP directory concepts, identity governance (reviews/SoD/orphans), Zero Trust identity, and IAM monitoring. Web IDOR/BOLA and login hashing are covered in Authorization and Authentication courses.
- Level
- Intermediate
- Duration
- 5–7 weeks
- Modules
- 4 modules · 8 lessons
- Learning method
- Lessons + labs
What you will learn
- Execute joiner onboarding and same-day leaver deprovisioning
- Provision least-privilege group access and verify removal on exit
- Describe JIT PAM with vaulted secrets and session monitoring
- Map IdP vs SP for SAML/OIDC enterprise SSO
- Read AD/LDAP DN/OU concepts and GPO basics safely
- Apply access reviews, SoD, and orphan-account controls
- Explain Zero Trust identity and conditional access signals
- Hunt failed logins and privilege-change events in IAM audits
Course curriculum
Expand each module for lessons, progress, and labs assigned to that module — not a flat topic dump.
Module 1
Lifecycle and provisioning
JML onboarding/offboarding and group-based access assignment.
0/2 lessons
Module 1
Lifecycle and provisioning
JML onboarding/offboarding and group-based access assignment.
0/2 lessons
Lessons
- 1. Joiner–Mover–Leaverpreview~20 min
- 2. Group-Based Provisioning~20 min
Enrol to unlock full lessons and track module progress.
Module 2
Federation and directories
Enterprise SSO (SAML/OIDC) and AD/LDAP identity concepts.
0/2 lessons
Module 2
Federation and directories
Enterprise SSO (SAML/OIDC) and AD/LDAP identity concepts.
0/2 lessons
Lessons
- 1. SSO with SAML and OIDC~20 min
- 2. AD/LDAP and GPO Concepts~20 min
Enrol to unlock full lessons and track module progress.
Module 3
Privileged access and governance
PAM JIT controls plus IGA reviews, SoD, and orphans.
0/2 lessons
Module 3
Privileged access and governance
PAM JIT controls plus IGA reviews, SoD, and orphans.
0/2 lessons
Lessons
- 1. PAM and JIT Sessions~20 min
- 2. IGA Reviews and SoD~20 min
Enrol to unlock full lessons and track module progress.
Module 4
Zero Trust identity and monitoring
Conditional access signals and IAM threat hunting in audits.
0/2 lessons
Module 4
Zero Trust identity and monitoring
Conditional access signals and IAM threat hunting in audits.
0/2 lessons
Lessons
- 1. Zero Trust Conditional Access~20 min
- 2. IAM Audit and Threat Hunt~20 min
Enrol to unlock full lessons and track module progress.
Inside this course
Labs · Quizzes · Certificate
Labs below are curated for this syllabus (shared engine, course-specific assignments). They unlock with enrol; quizzes match course topics; finish ≈90%+ to claim a CYNARKS Academy certificate.
Course labs
8 assigned labs · free with this course enrol
- Identity Lifecycle (Joiner–Mover–Leaver)Unlock via course or plan
- Provisioning & Group AccessUnlock via course or plan
- Privileged Access Management (PAM)Unlock via course or plan
- SSO with SAML & OIDCUnlock via course or plan
- Directory Services (AD/LDAP Concepts)Unlock via course or plan
- Identity Governance & AdministrationUnlock via course or plan
- Zero Trust IdentityUnlock via course or plan
- IAM Monitoring & Identity ThreatsUnlock via course or plan
Track quiz
356 questions matched to this course topics
Knowledge checks for this track only — not a separate global quiz menu.
Start track quizCYNARKS certificate
Educational completion certificate · verify by ID
Your progress: 0% · enrol to unlock claim
Enrol in this course first.