The target SLAC IAM Services architecture consists of several major subsystems which are all deployed in a geo-diverse and cloud-hosted configuration:

• Identity registry
• Permissions engine
• IAM attribute directory,
• Federated authentication identity provider
• Geodiversity of all major subsystems