Identity & Access
13 terms in this topic area.
Authentication
What is authentication? Its meaning, how it differs from authorization, the three factors, methods such as MFA and passkeys, and typical attacks.
Biometric Authentication
What is biometric authentication? Methods such as fingerprint and face, how it works, FAR and FRR, attacks, liveness detection, passkeys and the GDPR explained.
BYOD
BYOD means employees use their own devices for work. See the benefits and challenges, and how to keep both security and productivity high.
Identity & Access Management (IAM)
Identity & Access Management (IAM) controls who can access which resources. It prevents unauthorized access and supports compliance.
Keycloak
What is Keycloak? The open source tool for single sign-on and IAM explained: features, realms, clients, LDAP/AD, MFA, passkeys and secure operation.
Least Privilege (Principle of Least Privilege)
The principle of least privilege gives users only the rights they need. Strict access control reduces risks and protects systems and data.
Mobile Device Management (MDM)
Mobile Device Management (MDM) helps organizations manage mobile devices securely. It reduces risks and keeps business running smoothly.
Multi-Factor Authentication (MFA)
Multi-factor authentication (MFA) requires more than one proof of identity. See how it works, its benefits, challenges, use cases and setup tips.
Need to Know Principle
What is the need to know principle? Definition, workplace examples, how it differs from least privilege, and how to apply it under ISO 27001 and GDPR.
Privilege Escalation
Privilege escalation lets attackers gain higher rights and take over a system. See its types, causes and defenses.
Security Assertion Markup Language (SAML)
Security Assertion Markup Language (SAML) enables single sign-on. See its technical basics, how it works, its security mechanisms and use cases.
Shadow IT
Shadow IT means IT systems used without the central IT department's knowledge. See its risks, benefits and how to keep it under control.
Single Sign-On (SSO)
What is single sign-on (SSO)? Its meaning, how an SSO login works, SAML, OpenID Connect and Kerberos, benefits, risks and how to roll out SSO securely.