# SEC02-BP04: Rely on a centralized identity provider

## Description

SSO, centralized IdP.

## Implementation Guidance

- Enterprise IdP integration
- Federation with cloud providers
- Single Sign-On for users
- Centralized user lifecycle
- Consistent security policies

## Risk Level

Medium - Decentralized identity is hard to manage.
