IAM works by verifying identities and managing access to resources. It integrates identity management systems and access management services to provide secure user access. This involves authentication methods, role-based access control, and managing user identities and access privileges across systems and applications.