Carestream IDMS enterprise asset access sequence orchestrates three-phase authentication and authorization across Sitecore Portal, Microsoft Entra External ID, Azure Functions, Cosmos DB, and Alibaba Cloud CDN. Phase 1 authenticates users via Entra ID; Phase 2 validates entitlements by querying RBAC Function App and Cosmos DB ProfileEntities against dealer historical product relationships; Phase 3 redirects authenticated, authorized requests to CDN-edge token-protected asset delivery. This architecture demonstrates secure multi-cloud asset distribution with asynchronous entitlement population and legacy Azure AD B2C deprecation handling. Fork and customize this sequence diagram on Diagrams.so to model your own identity federation and entitlement-driven access patterns across hybrid cloud infrastructure.