IDAM Capabilities Model

A comprehensive, industry-agnostic capability map for the IDAM function, covering 145+ business capabilities organized across 2 hierarchical levels. Use it to evaluate functional maturity, plan capability investments, and align technology to business needs.

Why a capability model, not a prompt

Identity and access management is the clearest possible case for why capabilities and technology need to be kept separate: verifying who someone is has gone from a guard checking a face, to a badge, to a magnetic-stripe card, to a password, to multi-factor tokens, to biometrics and passwordless — the technology keeps changing every few years, but "Authenticate an Identity" and "Authorize Access to a Resource" have been the same underlying capabilities the whole time. A generic AI prompt for "IDAM capabilities" will almost always hand you today's technology stack (SSO, MFA, whatever's newest) dressed up as capabilities, which is precisely the trap this model is built to avoid.

What's Inside

• Capability Map — 145+ capabilities across 2 hierarchical levels, in PowerPoint, Word, and Excel
• Capability Definitions — Clear descriptions at the most granular level for consistent interpretation
• Capability KPIs — Measurable indicators at Level 2 to assess maturity and performance

How Teams Use It

• Baseline current-state IAM maturity and pinpoint capability gaps ahead of a Zero Trust or identity-modernization program
• Scope IAM/IDAM platform RFPs against actual capabilities instead of a vendor's authentication-method checklist
• Give security, IT, and audit teams a shared vocabulary that doesn't need updating every time the authentication method changes
• Prioritize IAM investment by capability gap, not by whichever breach made the news this month

Who It's For

Security architects, IAM leads, enterprise architects, and compliance leaders building or auditing an identity and access strategy.