Identity and Access Management is the security perimeter for all authentication and authorization decisions. It federates identity via SAML/OIDC, enforces MFA requirements per tenant policy, and provides a centralized policy engine for fine-grained authorization checks across all platform services.

Relationships

Composes outgoing 1
Target Element Element Type
Security and Compliance Domain
Realizes outgoing 2
Target Element Element Type
IAM Platform Software System
Identity and Access Management Business Capability
Serves outgoing 2
Target Element Element Type
Authentication API API Contract
Authorization API API Contract
Owns outgoing 1
Target Element Element Type
Identity Record Aggregate Data Aggregate
Realized by incoming 4
Source Element Element Type
Identity and Access Management Business Capability
IAM Platform Software System
Authentication API API Contract
Authorization API API Contract
Part of incoming 1
Source Element Element Type
Security and Compliance Domain
Owned by incoming 1
Source Element Element Type
Identity Record Aggregate Data Aggregate

Architecture Context

Diagrams

Not yet referenced in any diagram

Properties

Type Component
Layer Application
Domain Security and Compliance
Status active
Sourcing hybrid
Owner Security Team

Additional Metadata

Archimate Type application-function
Ddd Type Bounded Context
Togaf Type Information System Service
Emm Type Logical IS Component

Meta Model

Business
Organization
Application current
Technology

Actions