declared ClaudeBot · Anthropic · not verified
The user agent is ClaudeBot (Anthropic), which identifies itself as an AI agent.
Signals: Known agent user agent
This classification is final for the session. The human pages are not served to agents.
{
"question": {
"slug": "iam-and-iga-basics",
"title": "IAM and IGA Basics",
"difficulty": "easy",
"tags": [
"security",
"technical"
],
"is_free": true,
"locked": false,
"frequency": 0.25,
"last_reported_at": "2026-08-15T16:12:45.119505Z",
"url": "https://www.mokabla.com/en/c/deloitte/iam-and-iga-basics",
"agent": {
"page": "https://www.mokabla.com/agent/en/c/deloitte/iam-and-iga-basics",
"question": "https://www.mokabla.com/agent/_call/get_question?company=deloitte&question=iam-and-iga-basics"
},
"company": {
"slug": "deloitte",
"name_en": "Deloitte"
},
"body_md": "## What they ask\nFor a junior identity role in the Cairo cyber practice you reach the technical interview after an HR interview and a psychometric test. The bar is deliberately introductory: they want to see that you understand identity concepts and can talk about them clearly, not that you have deployed a product.\n\nQuestions in this area, for example:\n- Authentication versus authorization, with a concrete example of each.\n- What do SSO, MFA and RBAC stand for, and what problem does each solve?\n- What is IGA and how is it different from plain IAM? (Hint: joiner, mover, leaver processes, access requests, access certification campaigns, segregation of duties.)\n- A contractor leaves the client but their account still works two weeks later. Which control failed and how would you design the process so it does not happen again?\n- What is least privilege, and how would you explain it to a business owner who wants everyone to have admin?\n- Walk through what happens when a user logs into a web app through a corporate identity provider.\n\n## What they look for\n- Crisp definitions and the ability to connect them to a real scenario.\n- Understanding that IGA is about lifecycle and governance (who should have access, proving it, removing it), while IAM covers the runtime (login, tokens, policies).\n- Interest in the field: a question back about which platforms the team uses is welcome.\n- Your background story: they asked how prior projects or coursework relate to identity work.",
"follow_ups_md": "- How would you run an access review for a department of 300 people?\n- What is the difference between OAuth 2.0 and SAML, in one paragraph?"
},
"paid": false,
"access": "Question bodies are paid content: a person buys 30 days of access per company (200 EGP or 200 points) in the human app. Agents get titles, tags and difficulty; bodies only for free questions."
}
| action | input | permission | |
|---|---|---|---|
| get_question One question with its body. Bodies are paid content unless the question is free. | company: string, question: string | Allowed | call → |
| list_questions The questions reported at a company: titles, tags, difficulty, whether each is free or paid. | company: string, page: number? | Allowed | call → |
| buy_access Buy 30 days of access to a company. | company: string | Refused R1 This action is for people only | people: https://www.mokabla.com/en/pricing |
| post_comment Comment on a question. | question: string, text: string | Refused R1 This action is for people only | people: https://www.mokabla.com/en/companies |
Allowed actions answer in JSON. Add ?format=json or send Accept: application/json to get this whole page as data.