Domain framework
D05 · Identity Platform & CIAM
Design, development, integration, and operation of Identity Providers and Customer Identity Platforms.
Key knowledge areas
- Identity Provider (IdP) Architecture
- Single Sign-On (SSO)
- Identity Federation
- Identity Brokering
- Customer Identity & Access Management (CIAM)
- Customer Registration and Onboarding
- Identity Proofing
- Social Login
- Customer MFA
- Account Linking
- Account Recovery
- Token Management
- Session Management
- Identity APIs
- Authentication Orchestration
- Identity Platform Scalability and Availability
Representative technologies
- Keycloak
- Auth0
- Okta Customer Identity
- Amazon Cognito
- Microsoft Entra External ID
Career alignment
- TRACK A — Identity Platform & CIAM Engineering: Core domain. View track
- TRACK B — Enterprise IAM / PAM / IGA Engineering: Supporting domain. View track
Suggested learning outcomes
- Design registration, account linking and recovery journeys.
- Evaluate IdP availability and session controls.
These prompts are editorial learning aids retained from the earlier textbook. They are not additional requirements in v0.4.
Connected questions
No dedicated starter question yet. Use the research notebook to frame a question in this domain.
Build competency evidence
Explain a mechanism, analyze an implementation or failure, build a tested lab, and justify an architecture. Keep shared technical explanations in the Knowledge Base and link to them from research.
Domain name, scope, knowledge areas and representative technologies follow the authoritative Framework v0.4. Questions may span multiple domains.