"""Identity: AD groups and roles, LDAP, sessions, devices, PINs, rate limits, step-up and signatures."""