216 terms
Glossary
- ABACConcept
- Access CertificationConcept
- Access TokenConcept
- Account RecoveryAuthentication
- Account Takeover (ATO)Threat
- ACME (Automated Certificate Management Environment)Protocol
- Active DirectoryPlatform
- Adaptive AuthenticationConcept
- Adversary-in-the-Middle (AitM)Threat
- Age VerificationCompliance
- Agent RegistryConcept
- Agentic IdentityConcept
- AMLCompliance
- AnonCredsStandard
- API KeyConcept
- Attack PathSecurity
- Authentication PolicyConcept
- Authenticator Assurance Level (AAL)Standard
- Authorization (AuthZ)Concept
- Authorization Code FlowProtocol
- Authorization ServerProtocol
- AuthZEN (Authorization API)Standard
- BBS SignatureStandard
- Bearer TokenConcept
- Biometric AuthenticationAuthentication
- Break-Glass AccountConcept
- Browser-in-the-Browser (BitB)Threat
- CAEPProtocol
- Calling Name Presentation (CNAP)Concept
- Certificate Authority (CA)Concept
- Certificate Lifecycle Management (CLM)Concept
- CIAMConcept
- CIBAProtocol
- CIEMConcept
- CJIS Security PolicyCompliance
- ClaimsConcept
- Client Credentials GrantProtocol
- Conditional AccessConcept
- Consent ManagementConcept
- Consent Phishing (Illicit Consent Grant)Threat
- Credential BrokeringConcept
- Credential StuffingThreat
- Cross App Access (XAA)Protocol
- Cyber Resilience Act (CRA)Compliance
- Decentralized Identifier (DID)Standard
- Delegation ChainConcept
- DeprovisioningConcept
- Device Authorization GrantProtocol
- Device Bound Session Credentials (DBSC)Standard
- Device PostureConcept
- DID DocumentStandard
- DID MethodStandard
- Digital Identity WalletConcept
- Directory ServiceConcept
- DPoPStandard
- Dynamic Client Registration (DCR)Protocol
- eIDASStandard
- EntitlementConcept
- Entity AnalyticsConcept
- Ethical Wall (Information Barrier)Compliance
- EUDI WalletStandard
- Fan-Out BreachThreat
- FAPIStandard
- Federation Assurance Level (FAL)Standard
- FedRAMPCompliance
- FIDO2Standard
- Fine-Grained Authorization (FGA)Concept
- GDPRCompliance
- GNAP (Grant Negotiation and Authorization Protocol)Protocol
- HIPAACompliance
- HOTPProtocol
- IAMConcept
- ID TokenConcept
- Identity as a Service (IDaaS)Concept
- Identity Assertion JWT Authorization Grant (ID-JAG)Protocol
- Identity Assurance Level (IAL)Standard
- Identity ChainingProtocol
- Identity FabricConcept
- Identity FederationConcept
- Identity OrchestrationConcept
- Identity ProofingConcept
- Identity Provider (IdP)Concept
- Identity ResilienceConcept
- Identity Verification (IDV)Concept
- IGAConcept
- InfostealerThreat
- Instance Metadata Service (IMDS)Concept
- ISO/IEC 27001Compliance
- ISPMConcept
- Issuer, Holder, VerifierConcept
- ITDRConcept
- Joiner-Mover-Leaver (JML)Concept
- JSON Web Token (JWT)Standard
- Just-in-Time (JIT) AccessConcept
- JWKSStandard
- KerberosProtocol
- KYCCompliance
- Lateral MovementThreat
- LDAPProtocol
- Least PrivilegeConcept
- LLMjackingThreat
- Local Login BypassConcept
- Machine IdentityConcept
- Magic LinkConcept
- MCP AuthorizationProtocol
- Mega-SeedConcept
- MFAConcept
- MFA Blind ZoneConcept
- MFA DeviceAuthentication
- MFA FatigueThreat
- MicrosegmentationConcept
- Mobile Driver's License (mDL)Standard
- mTLSProtocol
- NIST SP 800-63Standard
- Non-Human Identity (NHI)Concept
- NTLMProtocol
- Number MatchingAuthentication
- OAuth 2.0Protocol
- OAuth 2.0 Authorization Server MetadataProtocol
- OAuth 2.0 Protected Resource MetadataProtocol
- OAuth Client ID Metadata Document (CIMD)Protocol
- One-Time Password (OTP)Concept
- OpenID Connect (OIDC)Protocol
- OpenID for Verifiable Credential Issuance (OpenID4VCI)Protocol
- OpenID for Verifiable Presentations (OpenID4VP)Protocol
- Orphaned AccountConcept
- OSCAL (Open Security Controls Assessment Language)Standard
- PAMConcept
- PARProtocol
- Pass-the-CookieThreat
- PasskeyAuthentication
- Password ManagerConcept
- Password SprayingThreat
- PasswordlessConcept
- PCI DSSCompliance
- Phishable MFAConcept
- Phishing-Resistant MFAConcept
- PKCEProtocol
- PKIConcept
- Privilege EscalationThreat
- Privileged Access Workstation (PAW)Concept
- Privileged Remote Access (PRA)Concept
- Progressive ProfilingConcept
- Prompt InjectionThreat
- Proof of Possession (PoP)Concept
- ProvisioningConcept
- PSD2Compliance
- RADIUSProtocol
- RBACConcept
- ReBACConcept
- Refresh TokenConcept
- Relying Party (RP)Concept
- Resource Indicators for OAuth 2.0Protocol
- Revocation RegistryConcept
- Rich Authorization Requests (RAR)Protocol
- RISC (Risk Incident Sharing and Coordination)Protocol
- Risk-Based AuthenticationConcept
- Role MiningConcept
- Row-Level Security (RLS)Concept
- SAML 2.0Protocol
- SCIMProtocol
- ScopeProtocol
- SD-JWTStandard
- Secrets ManagementConcept
- Secrets RotationConcept
- Security Event Token (SET)Protocol
- Segregation of Duties (SoD)Concept
- Selective DisclosureConcept
- Self-Sovereign Identity (SSI)Concept
- Service AccountConcept
- Service PrincipalConcept
- Service Provider (SP)Concept
- Session HijackingThreat
- Session RecordingConcept
- Shared AccountConcept
- Shared Signals FrameworkProtocol
- SIM SwapThreat
- SmishingThreat
- SOC 2Compliance
- Social LoginConcept
- SPIFFEStandard
- SSOConcept
- SSO EnforcementConcept
- SSO Identifier (SSO ID)Protocol
- SSO TaxConcept
- Standing PrivilegeConcept
- Step-up AuthenticationConcept
- Strong Customer Authentication (SCA)Compliance
- Synced PasskeyAuthentication
- Talk-Past AttackThreat
- Temporary Access Pass (TAP)Authentication
- Token ExchangeProtocol
- Token IntrospectionProtocol
- Token TheftThreat
- TOTPProtocol
- Transaction Tokens (Txn-Tokens)Protocol
- Trust over IP (ToIP)Concept
- Trust RegistryConcept
- Trusted PublishingConcept
- Trusted RefereeConcept
- Two-Factor Authentication (2FA)Concept
- UEBAConcept
- User Lifecycle ManagementConcept
- Verifiable Credential (VC)Standard
- Verifiable Presentation (VP)Standard
- Vishing (Voice Phishing)Threat
- WebAuthnStandard
- WIMSE (Workload Identity in Multi-System Environments)Standard
- Workforce IdentityConcept
- Workload IdentityConcept
- Workload Identity FederationConcept
- X.509Standard
- Zero Standing PrivilegesConcept
- Zero TrustConcept
- Zero-Knowledge Proof (ZKP)Concept
- ZTNAConcept