Documenting client identity architecture

Overview

Single source of truth speeds incidents and audits.

Diagram elements

• IdP (Entra/Okta/ADFS), sync paths, MFA methods, CA policy layers, break-glass, federation with SaaS.

Written narrative

• Trust relationships, MFA exceptions, guest collaboration policy, sync account locations.

Storage

Secure documentation platform with version history; export PDF for DR site yearly.

Review cadence

Update within 5 days of major changes; verify during onboarding/offboarding MSP transition.