Certification     (ISC)2     Certified Information Systems Security Professional (CISSP)     Certified Information Systems Security Professional (CISSP) 2021

---

If implemented properly, Identity Access Management mechanisms and protocols can greatly improve an enterprise's visibility and security. This course will help you delve deeper into the practical implementation of identity and access management controls and mechanisms.
Explore the implementation of authentication systems like SAML, investigate the management of the identity and access provisioning lifecycle, and discover how the identification of people, devices, and services are managed. You'll also examine authentication and authorization protocols, provisioning and deprovisioning, and accounting, registration, and proofing of identity.
After finishing this course, you'll have an understanding of how to effectively use and execute identity and access mechanisms within your organization. Moreover, you can also use this course to prepare for the CISSP exam.

---

---

Objectives

CISSP 2021: Deploying Identity & Access Management (IAM) discover the key concepts covered in this course describe the RADIUS and TACACS+ AAA protocol operations define Security Assertion Markup Language (SAML) 2.0 and its practical implementation compare OpenID Connect (OIDC) and Open Authorization (Oauth) and how they can function together and standalone in modern environments describe the MIT Kerberos protocol and operation specifically in an Active Directory (AD) enterprise discuss provisioning and deprovisioning entities as in on/off-boarding and transfer operations examine the definition and assignment of roles and the management of people assigned to new roles review user, system, and service account access in an enterprise manage elevation (or escalation) of privileges of managed service accounts, use of sudo, and minimizing privilege creep implement Identity Management (IdM) and Multi-Factor Authentication (MFA) processes manage mechanisms like accounting, session management, registration, proofing, FIM, credential management, SSO, and JIT summarize the key concepts covered in this course