The methods and technologies used to determine who can access what resources, under what conditions. It's the mechanism that sits between a user and a...

The process of verifying that someone (or something) is who they claim to be when trying to access a system. In everyday terms, it's the login step - ...

The process of determining what resources a user (or system) is allowed to access after their identity has been verified through authentication. If au...

A digital representation of a user, system, or device within your IT environment. An identity is what systems use to uniquely recognize and track an e...

A broad term for the policies, processes, and technologies that manage digital identities and regulate user access to resources. IAM covers things lik...

An authentication scheme that requires more than one independent credential to verify a user's identity. In practice, this often means combining at le...

A software tool (or service) that securely stores and manages your passwords and other credentials. Instead of reusing or writing down passwords, you ...

The practice of giving each user or system the minimum level of access - permissions - necessary to do their job, and nothing more. By limiting privil...

User or service accounts that have elevated rights or administrative privileges on systems. Examples include IT admin accounts, accounts with domain-w...

An approach to managing user access by assigning permissions based on roles (job functions) rather than individual identities. With RBAC, you define r...