Workforce identity and SSO
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
design single sign-on for employees with the corporate directory.
Planned topics
- One identity provider (IdP) holds employee identities; applications trust it for sign-in (SSO).
- Federate with the existing corporate directory instead of creating new accounts.
- Multi-factor authentication (MFA) everywhere, with stronger factors for admins.
- Joiner-mover-leaver processes: access removal on departure must be automatic.
- Provide emergency (break-glass) access, stored securely and monitored.
Draft outline details
Demonstration
flow: employee, IdP login with MFA, token, application; the corporate directory as the source of identities.
Check your understanding
Why automate leaver processing?
Show answer
So access is removed on time without relying on manual steps.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.