Active Directory
Microsoft's directory service that stores user accounts and controls access to resources on Windows networks.
Related: LDAP, Directory as a Service, SSO
Identity & Access
Glossary category
Identity & Access
Who can log in to what, and how access is verified and controlled.
19 terms
Terms in Identity & Access
Conditional access
Allowing or blocking access based on conditions such as user, device health, location and risk.
Related: Zero Trust, MFA, Device compliance
Identity & Access
Directory as a Service
A cloud-hosted directory that manages users, devices and access without on-premises servers.
Related: Active Directory, LDAP, SSO
Identity & Access
IAM
Identity and Access Management
The policies and tools that make sure the right people get the right access to the right resources.
Identity & Access
Identity lifecycle management
Creating, updating and removing user access as people join, move within and leave an organisation.
Identity & Access
IGA
Identity Governance and Administration
Managing who has access to what, approving requests and reviewing access regularly for compliance.
Related: IAM, Identity lifecycle management, RBAC
Identity & Access
ITDR
Identity Threat Detection and Response
Tools and practices that detect and respond to attacks targeting identities, such as stolen credentials.
Related: IAM, UEBA, Credential stuffing
Identity & Access
Just-in-time access
Just-in-Time Access
Granting elevated access only when needed and only for a limited time.
Related: PAM, Least privilege, Zero Trust
Identity & Access
LDAP
Lightweight Directory Access Protocol
A standard protocol for reading and updating user information in a directory.
Related: Active Directory, SSO, Directory as a Service
Identity & Access
Least privilege
Giving users and systems only the minimum access they need to do their job.
Related: Zero Trust, PAM, RBAC
Identity & Access
MFA
Multi-Factor Authentication
Logging in with two or more proofs of identity, such as a password plus a one-time code or app approval.
Related: SSO, Passwordless authentication, Credential stuffing
Identity & Access
OAuth
A standard that lets an app access resources on a user's behalf without seeing their password.
Related: SAML, OpenID Connect, API security
Identity & Access
OpenID Connect
An identity layer built on OAuth 2.0 that lets apps verify who a user is.
Identity & Access
PAM
Privileged Access Management
Securing, controlling and monitoring accounts with elevated access, such as administrators.
Related: IAM, Least privilege, Just-in-time access
Identity & Access
Passkeys
Phishing-resistant login credentials stored on a device and unlocked with a fingerprint, face or PIN.
Related: Passwordless authentication, MFA
Identity & Access
Passwordless authentication
Logging in without a password, using passkeys, biometrics or device-based methods.
Identity & Access
RBAC
Role-Based Access Control
Granting access based on a user's role, such as finance or HR, instead of individually.
Related: Least privilege, IAM, PAM
Identity & Access
SAML
Security Assertion Markup Language
A standard that lets an identity provider tell an application a user is authenticated, enabling single sign-on.
Related: SSO, OAuth, OpenID Connect
Identity & Access
SSO
Single Sign-On
Signing in once to access many applications without entering a password for each.
Identity & Access
How NetNXT covers identity & access
These terms describe the work our Identity & Access Management service does for clients. The service page sets out what it includes.