Endpoint identity and access control