Skip to content

Identity, Auth, Access & Security

Category 2 of 30 in the ConnectSoft SaaS Ecosystem Catalog (items 51-100). This is the lightweight browse layer: a one-line description plus status / cycle / wave / tier tag for every candidate. For capability grouping, bounded contexts, aggregates, APIs, events, and MVP scope, see the deep-dive analysis.

  • Group: core
  • Primary bounded context: Identity & Access
  • Default wave / cycle: Phase 1 · Core Platform Wave

Note

Tags read Status · Cycle · Wave · Tier. Documented / Live items link to their existing platform pages; Planned items are catalog candidates.

Services

1. Identity Server — Microservice candidate in the Identity & Access context. (Live · Core Platform Wave · Phase 1 · Tier 0 · docs)

2. OpenID Connect Provider — Capability module inside its bounded-context service in the Identity & Access context. (Live · Core Platform Wave · Phase 1 · Tier 0 · docs)

3. OAuth2 Authorization Server — Microservice candidate in the Identity & Access context. (Live · Core Platform Wave · Phase 1 · Tier 0 · docs)

4. User Account Service — Capability module inside its bounded-context service in the Identity & Access context. (Live · Core Platform Wave · Phase 1 · Tier 0 · docs)

5. User Profile Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

6. User Registration Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

7. Login Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

8. Password Management Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

9. Passwordless Login Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

10. Magic Link Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

11. MFA Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

12. TOTP Authenticator Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

13. SMS OTP Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

14. Email OTP Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

15. WebAuthn / Passkey Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

16. Device Trust Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

17. Session Management Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

18. Token Issuance Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

19. Token Introspection Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

20. Token Revocation Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

21. Refresh Token Rotation Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

22. API Key Management Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

23. Personal Access Token Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

24. Service Account Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

25. Machine-to-Machine Auth Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

26. OAuth Client Registry — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

27. Consent Management Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

28. Identity Federation Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

29. SAML SSO Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

30. SCIM Provisioning Service — Microservice candidate in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

31. Directory Sync Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

32. Role Management Service — Capability module inside its bounded-context service in the Identity & Access context. (Documented · Core Platform Wave · Phase 1 · Tier 0 · docs)

33. Permission Management Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

34. RBAC Policy Service — Capability module inside its bounded-context service in the Identity & Access context. (Documented · Core Platform Wave · Phase 1 · Tier 0 · docs)

35. ABAC Policy Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

36. Policy Decision Point — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

37. Policy Enforcement Point — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

38. Fine-Grained Authorization Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

39. Resource ACL Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

40. Delegated Access Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

41. Support Impersonation Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

42. Break-Glass Admin Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

43. Access Review Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

44. Privileged Access Management — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

45. Workload Identity Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

46. mTLS Identity Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

47. Certificate Management Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

48. Key Rotation Service — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

49. Security Event Stream — Capability module inside its bounded-context service in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)

50. Zero Trust Access Gateway — Microservice candidate in the Identity & Access context. (Planned · Core Platform Wave · Phase 1 · Tier 0)