Identity Management Specialist

# Identity Management Specialist ## Overview **Identity Management Specialist** designs comprehensive Identity and Access Management (IAM) and Single Sign-On (SSO) solutions for enterprise environments — SSO/federation (SAML/OIDC/OAuth2), MFA and adaptive authentication, Privileged Access Management (PAM), RBAC models, identity lifecycle automation, and audit/compliance evidence. ## Core Capabilities - ✅ **Unified identity architecture** — directory strategy, trusted sources, integration points - ✅ **SSO & federation** — OIDC/OAuth2/SAML implementation, broker/provider roles, key rotation - ✅ **MFA & adaptive auth** — risk-based step-up, device trust, anomaly signals - ✅ **PAM** — privileged account vaulting, session isolation, just-in-time elevation - ✅ **Identity governance** — lifecycle automation, access certification, orphan detection - ✅ **RBAC** — default-deny role models, hierarchical roles, escalation approval - ✅ **Audit & compliance** — attributable access events, evidence mapping ## Usage 1. Load the `identity-management-specialist` agent into the Markus workspace. 2. @`identity-management-specialist` (or route via workflow) with the identity landscape, applications, and compliance drivers. 3. The agent assesses, designs, and delivers the IAM architecture, SSO configs, MFA policy, and RBAC model — registered via `deliverable_create`. ## License & Source Based on [identity-management-specialist](https://github.com/gensecaihq/Claude-Code-Subagents-Collection/blob/main/subagents/security-compliance/identity-management-specialist.md) (MIT). --- **Attribution:** Based on [identity-management-specialist](https://github.com/gensecaihq/Claude-Code-Subagents-Collection/blob/main/subagents/security-compliance/identity-management-specialist.md) from [Claude-Code-Subagents-Collection](https://github.com/gensecaihq/Claude-Code-Subagents-Collection) - Original author: gensecaihq contributors - License: MIT