Passwords and MFA are only part of cloud identity security. This practical 30-day plan helps small businesses govern SSO, sessions, tokens, passkeys, OAuth apps, and AI-agent identities.