Every additional login, vendor connection or cloud service an organisation adds is another door that needs a lock and a clear access policy behind it. This Identity and Access Management (IAM) Training Course from the Arab British Fellowship Training Academy walks IT and security professionals through exactly how that lock-and-key system should be designed, deployed and governed across modern digital environments.

With cloud infrastructure now the norm and dozens of stakeholder groups—employees, vendors, partners—needing different levels of access, effective IAM has become the backbone of information security rather than a back-office compliance task. The course covers the protocols (LDAP, SAML, OAuth, OpenID Connect) and access models (RBAC, ABAC) that make this possible, together with the identity lifecycle from onboarding to offboarding.

Participants also work through privileged access management, cloud and hybrid integration, and the incident-response playbook for when access controls fail. The programme is built to scale from small organisations to the complex, multi-branch infrastructures found in large enterprises and regulated sectors.

Who Should Attend?

• Information security officers in organisations and technology enterprises.
• IT infrastructure managers and network engineers.
• Specialists in identity and access management systems.
• Software and cloud solution developers who handle user and permission management.

Course Objectives

By the end of the programme, participants will be able to:

• Explain the fundamental principles of IAM and how it fits within IT governance.
• Design and implement access policies for users and applications, applying RBAC/ABAC models and the principle of least privilege.
• Work with the technologies and protocols used in modern IAM solutions, including MFA and PAM.
• Manage the digital identity lifecycle within an organisation, from onboarding to offboarding.
• Strengthen security and control across information systems and cloud infrastructure.

Module 1: Identity, Access and Why They Matter Now

• Why identity has become the primary attack surface in digital organisations
• Definition of IAM, its core components, and its relationship to IT governance
• Digital identity concepts: the nature of identities, uniqueness and trust, and the difference between identity, authentication and authorisation

Module 2: Standards, Protocols and Access Models

• Key protocols: LDAP, SAML, OAuth and OpenID Connect, and the international standards behind effective IAM
• Access and permission models: role-based (RBAC) and attribute-based (ABAC) access control, and fine-grained policies
• Authentication and multi-factor authentication (MFA): verification factors and integration with IAM platforms

Module 3: Managing the Identity Lifecycle and Privileged Access

• Creating, modifying and terminating identities across the employee and vendor lifecycle
• Privileged Access Management (PAM): how it differs from IAM, and protecting sensitive accounts and critical services
• Session control and activity logging, including integration with SIEM systems

Module 4: IAM Across Enterprise and Cloud Environments

• Integrating IAM with Active Directory and other enterprise services, and managing hybrid on-prem/cloud environments
• Access management for cloud applications (SaaS, PaaS, IaaS) using tools such as Azure and AWS
• Challenges of implementing IAM in large, multi-branch organisations, and centralised versus decentralised strategies
• Sector-specific requirements for government and financial institutions, including regulatory compliance and critical-infrastructure security

Module 5: Risk, Threats and Incident Response

• Analysing risk in identity and access: breach risk, permission gaps and risk-analysis tools
• Threats and attacks on IAM systems: identity theft, phishing and attack patterns
• Incident response for access-related breaches and coordination with cybersecurity teams

Module 6: Designing, Automating and Auditing an IAM Programme

• Designing an effective access policy: balancing security and usability, and applying least privilege
• Automating IAM processes: workflow rules for requests and approvals, and reducing human error
• Periodic privilege review, audit and compliance reporting

Module 7: Choosing Solutions and Looking Ahead

• Comparing commercial and open-source IAM solutions, and criteria for choosing the right fit
• Deploying IAM in phases: planning, testing and internal training for adoption
• IAM's role in digital transformation and modern environments (DevOps, IoT), and future trends including AI/ML and decentralised, self-sovereign identity