IAM Glossary
Welcome to Gamatech's glossary of identity and access management (IAM) terminology. We are constantly striving to make this the most comprehensive summary available online, so please contact us if you would like us to add a term you cannot find.
A
- Access Certification
- Access Control List (ACL)
- Access Management (AM)
- Access Request Management
- Access Review
- Access Token
- Account Information Service Provider (AISP)
- Account Servicing Payment Service Provider (ASPSP)
- Actuator
- Advanced Message Queuing Protocol (AMQP)
- Alias Entry
- Anti-Money Laundering (AML)
- AppAuth
- Application Agent
- Application Programming Interface (API)
- Assertion
- Attribute
- Authentication (Auth)
- Authentication Request
- Authentication, Authorization, Accounting (AAA)
- Authenticator
- Authenticator-Specific Module (ASM)
- Authoritative Source
- Authorization (AZ)
- Authorization Code
- Authorization Code Grant With PKCE
- Authorization Grant
- Authorization Server
B
C
- California Consumer Privacy Act (CCPA)
- Challenge-handshake authentication protocol (CHAP)
- Challenge–response authentication
- Chirps
- Claim
- Claim Provider
- Claim Token
- Client Credential
- Client Credentials Grant
- Client Initiated Backchannel Authentication (CIBA)
- Client to Authenticator Protocol (CTAP)
- Cloud Access Security Broker (CASB)
- Common Event Format (CEF)
- Competing Consumers
- Connectors
- ConnId
- Consent Management Platform (CMP)
- Constrained Application Protocol (CoAP)
- Correlation
- Credential
- Cross Domain Single Sign On (CDSSO)
D
- Data Distribution Service (DDS)
- Data Filtration
- Decentralized Identifiers (DIDs)
- Delegated Administration
- Device Code Grant
- Device Flow
- Device Flow with PKCE
- Device-Agnostic Control
- Diameter
- Digital Identification and Authentication Council of Canada (DIACC)
- Digital Identity (ID)
- Direct Messaging
- Directory Information Tree (DIT)
- Directory Namespace (Namespace)
- Directory Replication
- Directory Service
- Discretionary Access Control (DAC)
- Distinguished Name (DN)
- Dynamic Authorization Management (DAM)
E
- Edge Gateway
- Edge Layer
- Electronic Identification, Authentication and Trust Services (eIDAS)
- End-user
- Endpoint Device
- Enrollment
- Enterprise Single Sign On/ Windows Single Sign On (WIndows SSO)
- Entitlement
- Entity
- European Banking Authority (EBA)
- Extended TACACS (XTACACS )
- eXtensible Access Control Markup Language (XACML)
- Extensible Authentication Protocol (EAP)
- Extensible Messaging and Presence Protocol (XMPP)
F
G
H
I
- Identifier
- Identity
- Identity Aggregation
- Identity Analytics
- Identity and Access Management (IAM)
- Identity as a Service (IDaaS)
- Identity Assurance
- Identity Aware Proxy (IAP)
- Identity Correlation / Identity Linking
- Identity Defined Security Alliance (IDSA)
- Identity Fabric
- Identity Governance and Administration (IAG / IGA)
- Identity Management (IDM)
- Identity Management Institute (IMI)
- Identity of Things (IDoT)
- Identity Orchestration
- Identity Provider (IdP)
- Identity Relationship Management (IRM)
- Identity Resolution
- Identity Synchronization
- Identity Token (id_token)
- Identity verification service
- Implicit Grant
- IndieAuth
- Industrial Internet
- Integrator
- Internet Engineering Task Force (IETF)
- Internet of Things (IoT)
- IoT Cloud Platform
- Iot Security Foundation (IoTSF)
- ISO/IEC 27018
- Issuer
- Issuer Identifier
J
K
L
M
N
O
- OAUTH
- OAuth 2.0 Bearer Token
- OAuth Mutual Transport Layer Security (mTLS)
- Object Identifier (OID)
- Objectclass
- OIDC Client
- Omnichannel
- One Time Password (OTP)
- Open Authentication (OATH)
- Open Identity Connector Framework (OpenICF)
- Open Identity Exchange (OIX)
- Open Policy Agent (OPA)
- Open Researcher and Contributor ID (ORCID)
- OpenAPI Specification (OAS)
- OpenID
- OpenID Connect (OIDC)
- OpenID Connect Federation (OIDC Federation)
- OpenID Foundation (OIDF)
- OpenID Provider (OP)
- Organization for the Advancement of Structured Information Standards (OASIS)
- Organization Unit (OU)
- Orphan Account
- Out-of-band Authentication
- Outlier Access
- OxAuth
P
- Pairwise Pseudonymous Identifier (PPID)
- Passkey
- Password
- Password Authentication Protocol (PAP)
- Password Grant
- Payment Card Industry Data Security Standard (PCI DSS)
- Permission
- Permission Ticket
- Persisted Claims Token (PCT)
- Personal Area Network (PAN)
- Personal Identification Number (PIN)
- Personally Identifiable Information (PII)
- Platform Authenticator
- Policy Administration Point (PAP)
- Policy Decision Point (PDP)
- Policy Enforcement Point (PEP)
- Policy Information Point (PIP)
- Policy Management Authority (PMA)
- Privilege Elevation and Delegation Management (PEDM)
- Privileged Access Compliance Auditing (PACA)
- Privileged Access Management (PAM)
- Privileged Account and Session Management (PASM)
- Privileged Identity Access Management (PIAM)
- Privileged Identity Management (PIM)
- Progressive Profiling
- Proof Key for Code Exchange (PKCE)
- Protection API Access Token (PAT)
- Public Key Infrastructure (PKI)
- Push Authentication / Push Notification Authentication
R
- Radio Frequency Identification (RFID)
- Real-Time Operating System (RTOS)
- Reference Monitor
- Referral
- Refresh Token
- Refresh Token Grant
- Regulatory Technical Standards (RTS)
- Relative Distinguish Name (RDN)
- Releasability
- Relying Party (RP)
- Remote Authentication Dial-In User Service (RADIUS)
- Remote Identity Proofing (RIDP)
- Representational State Transfer (REST)
- Requesting Party Token (RPT)
- Resource Owner
- Resource Owner Grant
- Resource Owner Password Credential (ROPC)
- RESTful API Modeling Language (RAML)
- Revised Payment Services Directive (PSD2)
- Roaming Authenticator
- Rogue Account
- Role
- Role Based Access Control (RBAC)
- Rule Based Access Control
S
- SAML v2.0 Profile Authorization Grant
- Sarbanes–Oxley Act (SOX)
- Security Assertion Markup Language (SAML)
- Security Token Service (STS)
- Seed
- Segregation of Duties (SoD)
- Self-Sovereign Identity (SSI)
- Sensor Network
- Service Provider (SP)
- Service Provisioning Markup Language (SPML)
- Sign off/Log off (Logoff)
- Simple Authentication and Security Layer (SASL)
- Single Logoff (SLO)
- Single Sign-On (SSO)
- Site-Level Management
- Software-defined perimeter (SDP)
- Stateful Authentication
- Stateless Authentication
- Strong Authentication
- Strong Customer Authentication (SCA)
- Strong Password
- Subject Identifier
- Swagger
- System for Cross-domain Identity Management (SCIM)
- System on a Chip
T
U
- Ubiquitous Computing
- UK Open Banking Working Group (OBWG)
- Universal 2nd Factor (U2F)
- Universal Authentication Framework (UAF)
- Universally Unique Identifier (UUID)
- User
- User Access Request
- User Agent
- User And Entity Behavior Analytics (UEBA)
- User Deprovisioning
- User ID (identifier)
- User Lifecycle Management
- User Managed Access (UMA)
- User Presense (UP)
- User Provisioning
- User Verification (UV)
- UserInfo Endpoint