Identity & Access Management 54 articles

Overview Access Lifecycle Management (ALM) is a security process focused on managing user access rights from initial provisioning through modification to eventual deprovisioning. It addresses risks related to unauthorized access,…

Overview Access reviews and certifications are security governance processes designed to ensure that user access rights to systems and data remain appropriate over time. They address risks related to excessive,…

Overview Account recovery and reset security encompasses the methods and controls used to securely restore user access to accounts when credentials are lost or compromised. It addresses the risk of…

Overview Account takeover detection encompasses a set of security technologies and methodologies designed to identify unauthorized access or control of user accounts. It addresses the growing threat of attackers compromising…

Overview Adaptive authentication is a security technology that dynamically adjusts authentication requirements based on contextual risk factors. It addresses the challenge of balancing strong security with user convenience by evaluating…

Overview API Access Management is a security technology focused on controlling and monitoring access to application programming interfaces (APIs). It addresses the challenges of securing APIs from unauthorized use, abuse,…

Overview Authentication standards are protocols and frameworks designed to verify the identity of users, devices, or systems before granting access to resources. They address the challenge of ensuring secure and…

Overview Authorization standards define protocols and frameworks that govern the granting of access rights to resources within information systems. They address the challenge of ensuring that users or entities can…

Overview Cloud Entitlement Management (CIEM) is a security technology focused on managing and governing cloud permissions and entitlements across multi-cloud environments. It addresses the challenge of excessive, unused, or misconfigured…

Overview Conditional Access Policies are security controls that enforce access decisions based on contextual factors such as user identity, device state, location, and risk level. They address the challenge of…

Overview Credential theft protection concepts encompass a range of security measures designed to prevent unauthorized access to user credentials such as passwords, tokens, and cryptographic keys. These concepts address the…

Overview Customer Identity and Access Management (CIAM) is a security technology focused on managing and securing customer identities and their access to digital services. It addresses challenges related to user…

Overview Device trust and identity encompass security technologies and practices that verify and manage the authenticity and integrity of devices accessing digital resources. This approach addresses risks associated with unauthorized…

Overview Directory Services Security encompasses the practices and technologies used to protect directory services, which store and manage identity and access information within an organization. It addresses risks related to…

Overview Entitlement Management is a security technology focused on controlling and governing user access rights and permissions within an organization. It addresses the challenge of ensuring that individuals have appropriate…

Overview Federation misconfiguration risks pertain to vulnerabilities arising from incorrect setup or management of federated identity systems. These risks can lead to unauthorized access, data breaches, and trust relationship failures…

Overview Identity and Access Management (IAM) encompasses the policies, processes, and technologies used to manage digital identities and control user access to resources. It addresses the challenge of ensuring that…

Overview Identity Analytics is a security technology focused on analyzing and monitoring identity-related data to detect anomalies, manage risks, and enforce access policies. It addresses challenges related to identity governance,…

Overview Identity Data Hygiene refers to the processes and practices aimed at maintaining accurate, consistent, and up-to-date identity information within an organization’s systems. It addresses risks related to stale, duplicated,…

Overview Identity federation is a security technology that enables users to access multiple systems or applications across different domains using a single set of credentials. It addresses the challenges of…