Security, Identity & Access Control

1 of 49 in this book · 1 min read

Scope: identity boundaries, confidentiality, and authorized actions.

Capabilities: 12

#	Capability
1	Authentication SSO OAuth OIDC
2	RBAC ABAC ReBAC and Policy Authorization
3	Multi-tenant Isolation
4	Agent and Service Identity
5	Delegated Authorization
6	Least Privilege and Scoped Credentials
7	Secrets Management and Rotation
8	Encryption at Rest and In Transit
9	Sandboxing and Network Egress Control
10	Supply Chain Security for Tools and MCP
11	Audit Trail and Security Incident Response
12	Data Residency Retention and Right to Delete