Demo: Larkspur's identity architecture end to end
On This Lesson 3 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
assemble the identity design across all four populations for ARC-017-LAB1.
Draft outline details
Step by step
- Workforce: corporate directory federated to a cloud IdP with MFA; SSO to the back office and cloud console.
- Customers: a managed CIAM service with social login for web and mobile, using OIDC with PKCE.
- Partners: supplier portal access through federation where the partner has an IdP, otherwise managed accounts with MFA; partner APIs through OAuth 2.0 client credentials.
- Workloads: roles with least-privilege policies; no access keys.
- Planned mistake: a shared "admin" account for the cloud console. Fix: named users with just-in-time admin roles and a monitored break-glass account.
- Draw the end-to-end diagram and record each protocol choice with its reason.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.