# @wrnexus/identity

Enterprise identity and governance for WRNexusJS: OIDC discovery, signed SAML adapter flows,
LDAP/Active Directory synchronization adapters, SCIM provisioning, scoped API keys, service
accounts, approval workflows, consent history, retention, subject export/deletion and audit.

The package complements `@wrnexus/auth` (passkeys, MFA, devices, sessions, OAuth and audited
impersonation) and `@wrnexus/authz` (RBAC, ABAC and policy decisions). Protocol-specific SAML and
directory parsing is supplied through adapters so applications can select a maintained vendor SDK
without weakening framework validation, replay protection or governance auditing.