IAM Glossary

Clear definitions for identity governance, privileged access, and access control professionals.

Browse by category

Browse A-Z

Showing 363 terms

B

Back-Channel Communication

Bidirectional Synchronization

Biometric Authentication

Birthright Access

Bound Authenticator

Breached Password Detection

Break-Glass Access

Bring Your Own Device

E

Emergency Access Account

Entitlement Assignment

Entitlement Catalog

Entitlement Drift

Ephemeral Certificate

Externalized Authorization

eXtensible Access Control Markup Language

F

Fallback Authentication

Federated Credential

Federation Metadata

Federation Proxy

Front-Channel Communication

G

Grant Management

Group Provisioning

H

HMAC-Based One-Time Password

HRIS Integration

Home Realm Discovery

Hybrid Identity

I

IdP-Initiated SSO

Identity Broker

Identity Enrichment

Identity Orchestration

Identity Provider Federation

Identity as a Service

Implicit Trust Zone

Inherence Factor

Instance Profile

J

JSON Web Key Set

Just-in-Time Elevation

Just-in-Time Provisioning

K

Keystroke Logging

Knowledge Factor

Knowledge-Based Authentication

L

LDAP Search Filter

Lightweight Directory Access Protocol

M

Managed Identity

Mandatory Access Control

Marketing Consent

Memorized Secret Verifier

Metadata Exchange

Microsoft Entra Connect

Multi-Factor Cryptographic Device

Multi-Factor Cryptographic Software

Multi-Factor OTP Device

Mutual Authentication

N

Name Identifier

Network Location

Never Trust, Always Verify

Number Matching

O

OIDC Federation

One-Time Password

OpenID Connect Discovery

Organizational Unit

Orphaned Account

P

Pass-Through Authentication

Passkey Provider

Password Blocklist

Password Hashing

Password Length

Password Manager

Password Rotation

Passwordless Onboarding

Passwordless Registration

Per-Request Access Decision

Phishing-Resistant Authentication

Platform Authenticator

Policy Administrator

Policy Decision Point

Policy Information Point

Policy Violation

Policy-Based Access Control

Possession Factor

Preference Management

Privacy Preference Center

Privilege Elevation

Privilege Escalation Path

Privileged Activity Log

Privileged Session Management

Progressive Profiling

Progressive Registration

Proof Key for Code Exchange

Proof of Possession

Provisioning Engine

Provisioning Policy

Provisioning Rule

Provisioning Workflow

Public Key Cryptography

Pull Provisioning

Push Notification Authentication

Push Provisioning

Pushed Authorization Requests

T

Test of User Presence

Time-Based One-Time Password

Token Introspection

Token Revocation

Toxic Access Combination

Trust Relationship

Two-Factor Authentication (2FA)

U

Unified Customer Profile

Universal Authentication Framework

Universal Login

Universal Second Factor

User Principal Name

User Provisioning

User Repository

User Verification

UserInfo Endpoint

V

Verifier Compromise Resistance

Verifier Impersonation Resistance

Virtual Directory

W

Z

Zero Standing Privileges

Promotional banner highlighting failures found in PCI audits and how to spot the gaps