Glossary

“Segregation of Duties” (SoD), also known as “Separation of Duties”, is a system of internal controls within an organization. SoD policies act as a first line of defense when protecting organizations […]

The “Principle of Least Privilege” (POLP) states a given user account should have the exact access rights necessary to execute their role’s responsibilities—no more, no less. POLP is a fundamental […]

“Identity and access management” (IAM) is the umbrella term for the structures and processes within an organization that administer and manage resources. Predominantly for IT resources, these processes mostly deal with […]

“Multifactor authentication” (MFA) is an account security process requiring two or more separate steps for a user to prove their identity. It most commonly refers to logging into a computer, […]

An OTP (i.e., one-time password), is a password that is valid for a set duration when completing a single login session or transaction. OTPs may sometimes be called dynamic passwords, […]

“Password synchronization” is a method of achieving single sign-on (SSO) by ensuring a user’s password is the same between multiple systems. One system, such as Active Directory, acts as the […]

“Security Assertion Markup Language” (SAML) is a type of single sign-on (SSO) standard. It defines a set of rules/protocols that allow users to access systems and applications with a single […]

OAuth is, simply put, a protocol and login method that confirms user identities based upon existing, verified authentication. When you log in to an app or online site and select […]