144 terms
Glossary
- ABACConcept
- Access CertificationConcept
- Access TokenConcept
- Account RecoveryAuthentication
- Account Takeover (ATO)Threat
- Active DirectoryPlatform
- Adaptive AuthenticationConcept
- Agentic IdentityConcept
- AMLCompliance
- AnonCredsStandard
- API KeyConcept
- Attack PathSecurity
- Authenticator Assurance Level (AAL)Standard
- Authorization Code FlowProtocol
- Authorization ServerProtocol
- BBS SignatureStandard
- Bearer TokenConcept
- Break-Glass AccountConcept
- CAEPProtocol
- Certificate Lifecycle ManagementConcept
- CIAMConcept
- CIBAProtocol
- CIEMConcept
- CJIS Security PolicyCompliance
- ClaimsConcept
- Client Credentials GrantProtocol
- Conditional AccessConcept
- Consent ManagementConcept
- Credential StuffingThreat
- Decentralized Identifier (DID)Standard
- DeprovisioningConcept
- Device Authorization GrantProtocol
- Device Bound Session Credentials (DBSC)Standard
- Device PostureConcept
- DID DocumentStandard
- DID MethodStandard
- Digital Identity WalletConcept
- DPoPStandard
- eIDASStandard
- EntitlementConcept
- Entity AnalyticsConcept
- EUDI WalletStandard
- FAPIStandard
- FedRAMPCompliance
- FIDO2Standard
- Fine-Grained Authorization (FGA)Concept
- GDPRCompliance
- HIPAACompliance
- HOTPProtocol
- IAMConcept
- ID TokenConcept
- Identity Assurance Level (IAL)Standard
- Identity FederationConcept
- Identity Provider (IdP)Concept
- Identity ResilienceConcept
- Identity Verification (IDV)Concept
- IGAConcept
- InfostealerThreat
- ISPMConcept
- Issuer, Holder, VerifierConcept
- ITDRConcept
- Joiner-Mover-Leaver (JML)Concept
- JSON Web Token (JWT)Standard
- Just-in-Time (JIT) AccessConcept
- JWKSStandard
- KerberosProtocol
- KYCCompliance
- Lateral MovementThreat
- LDAPProtocol
- Least PrivilegeConcept
- LLMjackingThreat
- Magic LinkConcept
- MFAConcept
- Mobile Driver's License (mDL)Standard
- mTLSProtocol
- NIST SP 800-63Standard
- Non-Human Identity (NHI)Concept
- NTLMProtocol
- OAuth 2.0Protocol
- OpenID Connect (OIDC)Protocol
- OpenID for Verifiable Credential Issuance (OpenID4VCI)Protocol
- OpenID for Verifiable Presentations (OpenID4VP)Protocol
- Orphaned AccountConcept
- PAMConcept
- PARProtocol
- PasskeyAuthentication
- Password SprayingThreat
- PasswordlessConcept
- PCI DSSCompliance
- Phishing-Resistant MFAConcept
- PKCEProtocol
- PKIConcept
- Privilege EscalationThreat
- Progressive ProfilingConcept
- ProvisioningConcept
- PSD2Compliance
- RADIUSProtocol
- RBACConcept
- ReBACConcept
- Refresh TokenConcept
- Relying Party (RP)Concept
- Revocation RegistryConcept
- Risk-Based AuthenticationConcept
- Role MiningConcept
- Row-Level Security (RLS)Concept
- SAML 2.0Protocol
- SCIMProtocol
- ScopeProtocol
- SD-JWTStandard
- Secrets ManagementConcept
- Secrets RotationConcept
- Segregation of Duties (SoD)Concept
- Selective DisclosureConcept
- Self-Sovereign Identity (SSI)Concept
- Service AccountConcept
- Service PrincipalConcept
- Service Provider (SP)Concept
- Session HijackingThreat
- Shared AccountConcept
- Shared Signals FrameworkProtocol
- SIM SwapThreat
- SOC 2Compliance
- Social LoginConcept
- SPIFFEStandard
- SSOConcept
- Step-up AuthenticationConcept
- Strong Customer Authentication (SCA)Compliance
- Token ExchangeProtocol
- Token TheftThreat
- TOTPProtocol
- Trust over IP (ToIP)Concept
- Trust RegistryConcept
- UEBAConcept
- Verifiable Credential (VC)Standard
- Verifiable Presentation (VP)Standard
- Vishing (Voice Phishing)Threat
- WebAuthnStandard
- Workload IdentityConcept
- Workload Identity FederationConcept
- X.509Standard
- Zero Standing PrivilegesConcept
- Zero TrustConcept
- Zero-Knowledge Proof (ZKP)Concept
- ZTNAConcept