Identity and access: sign in, bind, grant, revoke