Allowed R6 · Within policy
{
"slug": "iam-and-iga-basics",
"title": "IAM and IGA Basics",
"difficulty": "easy",
"tags": [
"security",
"technical"
],
"is_free": true,
"locked": false,
"frequency": 0.25,
"last_reported_at": "2026-08-15T16:12:45.119505Z",
"url": "https://www.mokabla.com/en/c/deloitte/iam-and-iga-basics",
"agent": {
"page": "https://www.mokabla.com/agent/en/c/deloitte/iam-and-iga-basics",
"question": "https://www.mokabla.com/agent/_call/get_question?company=deloitte&question=iam-and-iga-basics"
},
"company": {
"slug": "deloitte",
"name_en": "Deloitte"
},
"body_md": "## What they ask\nFor a junior identity role in the Cairo cyber practice you reach the technical interview after an HR interview and a psychometric test. The bar is deliberately introductory: they want to see that you understand identity concepts and can talk about them clearly, not that you have deployed a product.\n\nQuestions in this area, for example:\n- Authentication versus authorization, with a concrete example of each.\n- What do SSO, MFA and RBAC stand for, and what problem does each solve?\n- What is IGA and how is it different from plain IAM? (Hint: joiner, mover, leaver processes, access requests, access certification campaigns, segregation of duties.)\n- A contractor leaves the client but their account still works two weeks later. Which control failed and how would you design the process so it does not happen again?\n- What is least privilege, and how would you explain it to a business owner who wants everyone to have admin?\n- Walk through what happens when a user logs into a web app through a corporate identity provider.\n\n## What they look for\n- Crisp definitions and the ability to connect them to a real scenario.\n- Understanding that IGA is about lifecycle and governance (who should have access, proving it, removing it), while IAM covers the runtime (login, tokens, policies).\n- Interest in the field: a question back about which platforms the team uses is welcome.\n- Your background story: they asked how prior projects or coursework relate to identity work.",
"follow_ups_md": "- How would you run an access review for a department of 300 people?\n- What is the difference between OAuth 2.0 and SAML, in one paragraph?",
"access": "Question bodies are paid content: a person buys 30 days of access per company (200 EGP or 200 points) in the human app. Agents get titles, tags and difficulty; bodies only for free questions."
}