Home Mission Board OCI
Coming Soon OCI OCI Architect

Identity and Access Management

PRJ-OCI-SEC-097

Centralized identity management

~8 min read Advanced
Status Coming Soon
Last Updated Jan 16, 2026
Completion 0%
Status: Coming Soon· Last Updated: Jan 16, 2026· Completion: 0%· ~8 min read· Advanced
Download Guide Watch Tutorial View Architecture Download Architecture

Estimated Monthly Cost

~$20/mo on minimal config
ComputeStorageMonitoring
Business ContextFragmented identity silos across diverse applications lead to inconsistent acces…

The Problem

  • Fragmented identity silos across diverse applications lead to inconsistent access policies and significant administrative overhead within OCI environments.
  • Lack of robust multi-factor authentication (MFA) and federated identity capabilities exposes OCI resources to elevated risks of unauthorized access and credential compromise.
  • Manual user provisioning and de-provisioning processes are slow, error-prone, and fail to meet stringent compliance requirements for timely access revocation in OCI.

The Solution

  • Implement OCI Identity Domains to establish a unified identity store, centralizing user management and access policy enforcement across all OCI services and integrated applications.
  • Deploy OCI Identity and Access Management (IAM) policies to define granular, role-based access controls, ensuring least privilege access to OCI compute, storage, and network resources.
  • Integrate MFA and federated identity providers (e.g., corporate directories) using OCI Identity Domains to enhance authentication security and streamline user login experiences.

Business Value

  • Reduces identity-related operational costs by 30% through automated user lifecycle management and centralized policy administration.
  • Improves compliance audit readiness by 50%, enabling rapid generation of access reports and demonstrating adherence to regulatory mandates.
  • Decreases the risk of unauthorized access by 75% by enforcing strong MFA and granular access controls across all OCI assets.
  • Accelerates user onboarding and offboarding processes by 40%, ensuring immediate access provisioning and timely access revocation.

Risk Mitigation

  • Mitigates the risk of data breaches and unauthorized access by implementing strong authentication and authorization mechanisms.
  • Reduces the likelihood of compliance violations by enforcing consistent security policies and providing comprehensive audit trails.
  • Addresses insider threat risks by ensuring least privilege access and robust monitoring of user activities within OCI.
  • Minimizes operational disruptions due to identity-related issues through centralized management and automated processes.
GRC MappingISO 27001:2022 (A.5.1, A.5.16, A.5.17, A.6.2, A.8.2) for information security ma…

Compliance Frameworks

  • ISO 27001:2022 (A.5.1, A.5.16, A.5.17, A.6.2, A.8.2) for information security management.
  • NIST Cybersecurity Framework (CSF) (ID.AM, PR.AC, DE.CM) for identity management and access control.
  • SOC 2 Type 2 (CC6.1, CC6.2, CC6.3, CC6.4, CC7.1) for security, availability, and confidentiality principles.
  • GDPR (Article 5, Article 32) for data protection and security of processing.

Security Controls Implemented

  • Multi-Factor Authentication (MFA) enforced via OCI Identity Domains for all privileged and sensitive access.
  • Role-Based Access Control (RBAC) implemented using OCI IAM policies to restrict access based on job function and least privilege.
  • Federated Identity Management integrating with corporate identity providers for seamless and secure user authentication.
  • Automated user lifecycle management (provisioning/de-provisioning) through OCI Identity Domains to ensure timely access adjustments.
  • Comprehensive audit logging and monitoring of all identity and access events using OCI Audit service.

Audit Evidence

  • OCI Audit logs detailing all user authentication attempts, access policy changes, and resource access events.
  • OCI IAM policy documents and configuration snapshots demonstrating granular access controls and RBAC implementation.
  • User access review reports and certification records validating appropriate access levels for all OCI users.
  • MFA enrollment and usage reports from OCI Identity Domains confirming widespread adoption and enforcement.

Regulatory Alignment

  • GDPR (Article 5: Principles relating to processing of personal data; Article 32: Security of processing).
  • HIPAA Security Rule (45 CFR Part 164, Subpart C: Administrative Safeguards, Technical Safeguards) for protecting electronic protected health information.
  • PCI DSS (Requirement 8: Identify users and authenticate access to system components) for securing cardholder data.
  • CCPA (Section 1798.100: Consumer rights; Section 1798.150: Data breaches) for consumer data privacy and security.

Video tutorial coming soon!

Subscribe to our YouTube channel to get notified when this tutorial is published.

Subscribe on YouTube

Architecture Diagram

PRJ-OCI-SEC-097 Architecture

Technology Stack

IAM
Identity Domains
MFA
Federation

Complete Documentation

Prerequisites

OCI Administrator policy
OCI CLI configured
Terraform >= 1.5 (optional)
OCI tenancy with credits
API key pair generated
1

Clone & Configure

Clone the repository and configure OCI CLI with your tenancy OCID, user OCID, and API key.

oci setup config
2

Review Policies

Review and create the required OCI IAM policies for the deployment compartment.

oci iam policy list --compartment-id
3

Initialize Infrastructure

Run Terraform init and plan to preview the OCI resource changes before applying.

terraform init && terraform plan -out=tfplan
4

Deploy Resources

Apply the Terraform plan to provision all OCI resources in your target compartment.

terraform apply tfplan
5

Verify & Monitor

Verify the deployment in the OCI Console and check the Monitoring service for any alarms.

oci monitoring alarm list --compartment-id

Deployment Guide

Step-by-step instructions to deploy this mission

Download Guide

Architecture Diagram

Visual representation of the system architecture

Download Architecture

Source Code

Complete source code and configuration files

View on GitHub

Video Tutorial

Watch the complete walkthrough video

Watch Now