68%
Zero Trust Score
SSO Travel / Login Alerts
3
🚨 High CVSS travel spikes
Excessive IAM Drift Roles
42
Drifts from standard privilege
Zero Trust Status
SECURITY DEVIATION
🟡 Revoke active anomalies to secure credentials
Module 07
Identity PreCheck Telemetry
DEMO DATANOMINAL
SSO Identities Funnel
○ BASELINE5.8KSSO IdentitiesTotal directories SSO users mapped
880Privilege DriftsIAM users with excessive role drift
112MFA GapsActive users without MFA enforcement
4.8KOrphans DisabledOrphaned stale accounts deactivated
Enterprise GRC Checkpoint
Directory IntegrationENTERPRISE
Secure Active Directory / Okta SSO authentication endpoints.
MFA EnforcementENTERPRISE
Audit and enforce multi-factor authentication coverage.
🚨 Active SSO Travel & Authentication Anomaly Alerts
Real-time Identity Threat Detection (ITDR) showing login anomalies. Revoke compromised user tokens in real-time.
SWIFT Vault Impossible TravelUser: security-audit@wellsfargo.com
criticalSession logins from New York, US and Berlin, Germany within 15 minutes targeting SWIFT databases.
Privileged Transaction InactivityUser: temp-admin@wellsfargo.com
highActive administrator banking session without active browser events > 2 hours.
SSO Token Drift DetectionUser: api-service-sync@wells.internal
mediumAccess token generated with excessive wildcards and unencrypted egress rules.
🔑 High Privilege Role Drift Auditor
List high-risk administrative user roles showing permission drift. Deprovision excessive permissions to enforce Least Privilege.
| Administrative Role | Permission Drift Status | Least Privilege Actions |
|---|---|---|
| SWIFT Admin GroupScope: Root Administrator · (12 users) | Excessive Wildcards | |
| Contractor SSO AccessScope: Developer Access · (45 users) | MFA Bypass Active | |
| Database Sync ProfileScope: DB Owner Root · (6 users) | Stale Credentials (>90d) |
Directory MFA Coverage
Active Directory Enrolled Accounts:91.2% Enforced
💻 IAM Terminal — Live Session & Privilege Deprovisioner