Identity and Access Management

Code: TBD · Credits: 4 · Hours: 60 · Type: ELECTIVE

Modern security architecture is identity-led: the network perimeter has all but dissolved, and every access decision is now made against a claim about who is requesting it. This elective covers the protocols, the lifecycle, and the privilege model that hold this together.

Key topics

Identity sources: directory services (LDAP, Active Directory), HR systems, federated SoR.
Authentication factors and modern MFA: TOTP, push, FIDO2 / WebAuthn / passkeys.
Federation protocols: SAML 2.0, OAuth 2.1, OIDC, SCIM, just-in-time provisioning.
Privileged Access Management (PAM): vaulting, session recording, JIT elevation.
Identity governance: access reviews, separation of duties, role mining.
Zero-trust identity: device posture, conditional access, BeyondCorp pattern.
Identity for non-human actors: service accounts, workload identity, SPIFFE/SPIRE.

Learning outcomes

By the end of this subject, a student should be able to:

Design federation between a Nepali bank's AD and a SaaS HR system using OIDC.
Implement FIDO2 / passkey authentication on a sample app.
Roll out PAM for 50 admin users without breaking existing workflows.
Run an access-recertification campaign and report the residual risk.

Key topics​

Learning outcomes​

Further reading​

Key topics

Learning outcomes

Further reading