Inspect identity proofing, credentials, sessions, recovery, federation, and reauthentication controls.