Design identity and access for humans and workloads with zero-trust principles — federated SSO, MFA, short-lived credentials, just-in-time elevation, least privilege, and continuous verification. Use when designing authn/authz, hardening cloud accounts, or removing standing access.
