Iam Glossary

Browse 28 iam terms defined in plain English, from the cultural dictionary of computing.

28 Iam Terms

Access Control List
Access Control List is an authorization structure that stores ordered allow and deny entries for users, groups, or services on an object. Security teams use it...
Active Directory
Active Directory is a Microsoft directory service that centralizes identity, authentication, policy, and resource administration in Windows environments....
Authentication Bypass
Authentication Bypass is an attack technique in which an adversary circumvents the intended login or verification path and reaches protected functionality...
Credential Harvesting
Credential Harvesting is an attack technique in which an adversary collects usernames, passwords, tokens, or secrets through phishing, malware, or fake...
Credential Manager
Credential Manager is a system component or service that stores, retrieves, and protects secrets such as passwords, tokens, or certificates. Security teams use...
Credential Replay
Credential Replay is an attack technique in which an adversary reuses captured authentication material against another session, service, or time window....
Deauthentication Attack
Deauthentication Attack is an attack technique in which an adversary sends forged wireless management frames to disconnect clients from an access point....
Default Credentials
Default Credentials is factory-set usernames and passwords that remain dangerous if not changed before deployment. Security teams use it to enforce trust,...
Federated Identity
Federated Identity is an identity model where one domain accepts authentication assertions issued by another trusted domain. Security teams use it to enforce...
Identity and Access Management
Identity and Access Management is the set of processes and systems used to govern identities, roles, authentication, and authorization. Security teams use it...
Identity Federation
Identity Federation is the trust relationship and protocol flow that lets multiple organizations share identity assertions. Security teams use it to enforce...
Identity Management
The administration of identities, credentials, authentication flows, and access relationships across systems and services. Identity management includes...
Identity Provider
Identity Provider is a service that authenticates users and issues identity assertions or tokens to relying applications. Security teams use it to enforce...
IDM
Short for identity management, or sometimes identity management platform, referring to systems and processes that create, maintain, and control digital...
Just-in-Time Access
Just-in-Time Access is privileged access granted only when needed and usually for a limited duration with approval or audit controls. Security teams use it to...
Least Privilege
Least Privilege is the access-control principle that grants only the minimum permissions needed to perform an approved task. Security teams use it to enforce...
Mandatory Access Control
Mandatory Access Control is an access model in which a central policy, not the individual user, determines allowed operations on labeled objects. Security...
Multi-Factor Authentication Bypass
Multi-Factor Authentication Bypass is an attack technique in which an adversary defeats a second factor through workflow abuse, phishing proxies, or weak...
OAuth Token Theft
OAuth Token Theft is an attack technique in which an adversary steals bearer tokens and reuses them to call protected APIs or impersonate sessions. Defenders...
Overprivileged
Describing an account, role, application, or service that has more access or authority than it actually needs. Overprivileged identities are dangerous because...
PAM
Short for privileged access management, the set of tools and processes used to control, monitor, and secure highly privileged accounts, credentials, and...
Permission Model
The design by which a system defines, groups, grants, and enforces permissions for users, services, and other identities. A good permission model makes least...
Privileged Identity
A human or machine identity that holds or can obtain elevated permissions over important systems, data, or control planes. Privileged identities include not...
Role
A named collection of permissions or privileges that can be assigned to users, services, or processes to control what actions they are authorized to perform....
Role-Based Access Control
An authorization model that grants permissions according to predefined roles rather than individual users. It shows up in application security, identity,...
Role Engineering
The design of reusable roles and their permissions so access can be assigned consistently and according to job function rather than individually by exception....
Role Explosion
A situation in which a role-based access control system accumulates too many narrow, overlapping, or exception-driven roles to manage effectively. Role...
Role Mining
The analysis of existing permission assignments and usage patterns to discover candidate roles or simplify a role-based access control model. Role mining is...

Related Topics