Active Directory Validation


I have validated many GxP systems including lab systems, SCADA, ERP systems etc., Can anyone guide me how to validate an automated identity and access management system. How do I ensure that my Identity and access management systems is compliant?

I believe this is not a GxP system but a single sign on may give access to different GxP applications.

Any help in this space is highly appreciated.