Identity Glossary

Browse 114 identity terms defined in plain English, from the cultural dictionary of computing.

114 Identity Terms

Anime Avatar
An online profile image styled after anime characters or aesthetics, often used in forums, social platforms, gaming communities, and tech discourse. In...
Authentication
Authentication is the process of verifying that a user, device, or system is genuinely who or what it claims to be, answering the question 'Who are you?'...
Authentication Factor
A category of evidence used to verify identity, such as something you know, have, or are. Multiple authentication factors are combined in MFA to make account...
Authentication Flow
The sequence of steps by which a user or system proves identity and receives a session, token, or other authenticated state. Authentication flows often include...
Authentication Library
A reusable library that implements common authentication capabilities such as token validation, session management, OAuth flows, or password hashing....
Authentication Protocol
A formal method or protocol used to verify identity and establish trust between parties, such as Kerberos, OAuth flows, or certificate-based schemes. The...
Authentication Provider
A service or component responsible for verifying identity and often issuing tokens, assertions, or session information to applications. Authentication...
Authentication Service
A dedicated service that handles login, credential validation, token issuance, session management, or identity federation for one or more applications....
Authentication Token
A credential or artifact proving that authentication has already occurred, allowing later requests or sessions to proceed without re-entering credentials each...
Authorization Code
A short-lived code used in OAuth authorization flows that a client exchanges for tokens after the resource owner authorizes access. It reduces exposure...
Authorization Server
The component in an authorization framework that authenticates users, obtains consent, and issues tokens to clients. In OAuth-based systems, the authorization...
Badge
A physical or digital identifier used for access, attendance, affiliation, or status, such as office badges, conference badges, or achievement badges in...
Biometric Authentication
Biometric Authentication is identity verification based on physical or behavioral traits such as fingerprints, face patterns, or typing rhythm. Security teams...
Catfishing
Pretending to be someone else online, often using a false identity to build trust, manipulate, or deceive. In internet culture the term is associated with...
Challenge-Response
Challenge-Response is an authentication pattern in which a verifier sends a nonce or challenge and validates a computed response. Security teams use it to...
Claims-Based Identity
An identity model where information about a user or entity is expressed as claims in tokens or assertions, and systems make decisions based on those claims. It...
Cloud IAM
The identity and access management system of a cloud platform, controlling who or what can access resources and what actions they may perform. Cloud IAM...
Code Flow
Usually shorthand for the OAuth authorization code flow, where a client obtains an authorization code and exchanges it for tokens. It is widely used because it...
Code Monkey
Code Monkey is a somewhat self-deprecating slang term for a programmer whose work primarily involves writing routine, straightforward code without much...
Code Pride
A sense of ownership and satisfaction in writing solid, thoughtful, well-maintained code. In healthy teams code pride motivates quality; in unhealthy ones it...
Coder
A person who writes computer code, often used more casually and broadly than titles like software engineer or developer. In tech culture the word can carry...
Coder Culture
The broader culture surrounding people who code, including values, jokes, status signals, work habits, and shared frustrations. Coder culture can be energizing...
Code Tribe
An informal term for a group of people bound by a shared coding identity, language community, company culture, or engineering style. The phrase can signal...
Cross-Forest Attack
An attack that exploits trust relationships, misconfigurations, or credential pathways across separate Active Directory forests. Cross-forest attacks are...
Derived Credential
A credential generated from an existing trusted identity source, often by deriving a new certificate or authenticator for a different device such as a mobile...
Device Fingerprinting
Device Fingerprinting is the identification of a device using stable characteristics such as software versions, hardware traits, or protocol behavior. Security...
Digital Certificate
Digital Certificate is a signed data structure that binds an identity to a public key for trust decisions. Security teams use it to enforce trust, reduce...
Digital Footprint
The trail of data, content, activity, and identifiers a person or organization leaves across digital systems. In internet culture digital footprint is often...
Digital Identity
The representation of a person, device, service, or organization in digital systems through accounts, credentials, attributes, and trust relationships....
Domain Controller
A server that authenticates users and computers, enforces directory policies, and stores identity data in an Active Directory domain. Domain controllers are...
Domain Hijacking
Domain Hijacking is the unauthorized takeover of domain registration, DNS management, or delegation control for a domain. Security teams use it to enforce...
Domain Trust
A configured relationship that allows identities from one domain or forest to be recognized and authorized in another. Domain trusts simplify administration,...
Engineer
A person who designs, builds, maintains, or improves systems using technical knowledge and practical judgment. In tech culture the term carries both...
Engineer Brain
A joking description of the habit of over-optimizing, abstracting, or trying to systematize everyday problems like an engineer.
Enrollment
The process of registering a user, device, token, biometric factor, or certificate into an identity or security system so it can be recognized and trusted...
Geek Culture
The broader culture around enthusiastic interest in technology, games, science fiction, comics, gadgets, and adjacent fandoms. In tech history geek culture...
Group Membership
A user's or system's inclusion in an access-control group that grants permissions, roles, or policy scope. Group membership is fundamental in directory...
Hacker
Hacker is a term with a rich and contested history in computing culture. In its original sense, dating to the 1960s at MIT, a hacker is someone who explores...
IAM
Identity and Access Management — a framework for managing digital identities and their permissions. In cloud platforms, IAM controls who (users, services,...
Identity Federation
Identity Federation is the trust relationship and protocol flow that lets multiple organizations share identity assertions. Security teams use it to enforce...
Identity Governance
The policies, processes, and controls used to manage who should have access to what, who approves it, how it is reviewed, and how it is removed. Identity...
Implicit Grant
Implicit Grant is an older OAuth flow that exposed access tokens directly to the browser and is now discouraged for new systems. Security teams use it to...
JSON Web Encryption
JSON Web Encryption is the JOSE standard for encrypting claims or structured content into a compact token format. Security teams use it to enforce trust,...
JSON Web Key
JSON Web Key is the JOSE data format used to represent public, private, or symmetric keys in JSON. Security teams use it to enforce trust, reduce exposure,...
JSON Web Signature
JSON Web Signature is the JOSE standard for integrity-protecting structured data with digital signatures or MACs. Security teams use it to enforce trust,...
Just-in-Time Provisioning
An identity pattern where an account or access relationship is created automatically at the moment of first successful authentication rather than being...
JWT Claims
Key-value pairs encoded in a JSON Web Token's payload that carry information about the authenticated entity. Standard claims include sub (subject), exp...
Kerberos
Kerberos is a ticket-based network authentication protocol that relies on a trusted key distribution center. Security teams use it to enforce trust, reduce...
Keycloak
An open-source identity and access-management platform used for authentication, SSO, and user federation.
LDAP
Short for Lightweight Directory Access Protocol, the protocol used to query and manage directory information such as users, groups, devices, and permissions....
LDAP Community
The ecosystem of users, administrators, and contributors working with LDAP directories and related identity infrastructure. In enterprise and open-source...
Machine Identity
A credential-backed digital identity assigned to a device, server, container, service, or workload so systems can authenticate and authorize it automatically....
Multi-Factor
Describing authentication that requires more than one category of evidence, such as something you know, have, or are, rather than relying on a single password...
Mutual Authentication
Mutual Authentication is authentication in which each communicating party verifies the identity of the other. Security teams use it to enforce trust, reduce...
Nerd
A person strongly associated with intense intellectual or technical interests, often in computing, science, games, or niche hobbies. The term has shifted from...
Normie
A person who follows mainstream trends and has conventional interests, as opposed to the deeply online, technically obsessed, or culturally niche. Used...
OAuth 2.0 Flow
The specific grant type used in an OAuth 2.0 authorization process. Common flows include Authorization Code (web apps), PKCE (SPAs/mobile), Client Credentials...
OIDC
OpenID Connect — an identity layer built on top of OAuth 2.0 that adds a standardized ID token (a signed JWT containing user claims like email and name) to the...
Online Handle
A screen name, alias, or pseudonym used in online communities, forums, games, or social platforms. In hacker and internet culture, an online handle can...
OTP Bypass
OTP Bypass is a technique for defeating one-time password checks through logic flaws, phishing, interception, or recovery abuse. Security teams use it to...
Out-of-Band Authentication
An authentication method that confirms identity over a separate channel from the main login session. It shows up in application security, identity,...
Out-of-Band Verification
A verification step that uses an independent communication channel to confirm a request or identity claim. It shows up in application security, identity,...
Password Aging
The tracking of how long a password has existed since it was last changed, often used in policies that flag or force rotation of older credentials. Password...
Password Expiration
A policy requiring passwords to be changed after a set period of time, whether or not compromise is known. Password expiration remains common in some regulated...
Password Hash
A cryptographic concept related to password hash, secure communication, key handling, or trust establishment. It shows up in application security, identity,...
Password Policy
A security concept covering password policy and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Password Recovery
The process by which a user regains access to an account when the password is forgotten or unavailable. Password recovery is a high-risk path because weak...
Password Reset
The act of replacing an existing password with a new one, either by the user or through an administrative or automated recovery workflow. Password reset flows...
Permission Boundary
An identity or access control concept centered on permission boundary and how systems verify or authorize actions. It shows up in application security,...
PIN
A short numeric secret used to verify a user's identity during access to a device, account, or transaction. It shows up in application security, identity,...
PKI Certificate
A digital certificate issued within a public key infrastructure to bind an identity to a public key. It shows up in application security, identity,...
Principal
An identity or access control concept centered on principal and how systems verify or authorize actions. It shows up in application security, identity,...
Private Key
A cryptographic concept related to private key, secure communication, key handling, or trust establishment. It shows up in application security, identity,...
Privilege Boundary
An identity or access control concept centered on privilege boundary and how systems verify or authorize actions. It shows up in application security,...
Privileged Access Management
An identity or access control concept centered on privileged access management and how systems verify or authorize actions. It shows up in application...
Privileged Identity
A human or machine identity that holds or can obtain elevated permissions over important systems, data, or control planes. Privileged identities include not...
Profile Pic
Short for profile picture, usually not technical on its own but common in online team and product culture. In engineering slang, it can come up when features,...
Provisioning Security
The protection of account, device, certificate, and system provisioning processes so new resources are created with correct permissions, trusted configuration,...
Public Key
A cryptographic concept related to public key, secure communication, key handling, or trust establishment. It shows up in application security, identity,...
Public Key Infrastructure
A cryptographic concept related to public key infrastructure, secure communication, key handling, or trust establishment. It shows up in application security,...
Real Programmer
A historically loaded and often satirical archetype of a 'serious' programmer defined by low-level skill, toughness, or disdain for abstraction. The phrase is...
Registry Key
A cryptographic concept related to registry key, secure communication, key handling, or trust establishment. It shows up in application security, identity,...
Revocation
The invalidation of a credential, token, certificate, or access right before its normal expiration because it is no longer trusted or should no longer be...
Role Mapping
The process of connecting external groups, attributes, or business functions to internal application or system roles. Role mapping is common in federation,...
SAML
Security Assertion Markup Language, an XML-based standard for exchanging authentication and authorization data. It shows up in application security, identity,...
Security Key
A cryptographic concept related to security key, secure communication, key handling, or trust establishment. It shows up in application security, identity,...
Security Token
An identity or access control concept centered on security token and how systems verify or authorize actions. It shows up in application security, identity,...
Self-Signed Certificate
A cryptographic concept related to self-signed certificate, secure communication, key handling, or trust establishment. It shows up in application security,...
Service Account
A non-human identity used by applications, services, or automation to authenticate and interact with APIs and cloud resources. Unlike user accounts, service...
Service Principal
An identity or access control concept centered on service principal and how systems verify or authorize actions. It shows up in application security, identity,...
Session Token
An identity or access control concept centered on session token and how systems verify or authorize actions. It shows up in application security, identity,...
SHA-256
A cryptographic concept related to sha-256, secure communication, key handling, or trust establishment. It shows up in application security, identity,...
SSL Certificate
A cryptographic concept related to ssl certificate, secure communication, key handling, or trust establishment. It shows up in application security, identity,...
SSL Stripping
A cryptographic concept related to ssl stripping, secure communication, key handling, or trust establishment. It shows up in application security, identity,...
SSO
Single Sign-On -- an authentication scheme where one login grants access to multiple related applications without re-authenticating. Implemented via SAML,...
SSO Token
An identity or access control concept centered on sso token and how systems verify or authorize actions. It shows up in application security, identity,...
Symmetric Encryption
A cryptographic concept related to symmetric encryption, secure communication, key handling, or trust establishment. It shows up in application security,...
Tailscale
A mesh VPN product built on WireGuard concepts, popular for simple secure connectivity between devices and services.
TLS Certificate
A cryptographic concept related to tls certificate, secure communication, key handling, or trust establishment. It shows up in application security, identity,...
TLS Fingerprinting
A cryptographic concept related to tls fingerprinting, secure communication, key handling, or trust establishment. It shows up in application security,...
TLS Mutual Authentication
A TLS mode in which both client and server present certificates and verify each other. It shows up in application security, identity, infrastructure, or...
TLS Termination
A cryptographic concept related to tls termination, secure communication, key handling, or trust establishment. It shows up in application security, identity,...
Token Binding
An identity or access control concept centered on token binding and how systems verify or authorize actions. It shows up in application security, identity,...
Tokenization
An identity or access control concept centered on tokenization and how systems verify or authorize actions. It shows up in application security, identity,...
Trust Anchor
A security concept covering trust anchor and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Trust Boundary
An identity or access control concept centered on trust boundary and how systems verify or authorize actions. It shows up in application security, identity,...
Trusted Computing
A security concept covering trusted computing and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Trusted Execution Environment
A security concept covering trusted execution environment and its role in protecting systems, users, data, or operations. It shows up in application security,...
Trust Store
A security concept covering trust store and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Unauthorized Access
An identity or access control concept centered on unauthorized access and how systems verify or authorize actions. It shows up in application security,...
User Provisioning
An identity or access control concept centered on user provisioning and how systems verify or authorize actions. It shows up in application security, identity,...
Wildcard Certificate
A cryptographic concept related to wildcard certificate, secure communication, key handling, or trust establishment. It shows up in application security,...
Zero Trust Architecture
A security model that treats every access request as untrusted until identity, device, and context are verified. It shows up in application security, identity,...
Zero Trust Network Access
An access model that brokers application connections after verifying user, device, and policy context. It shows up in application security, identity,...

Related Topics