Identity and Access Management (IAM)
Section titled “Identity and Access Management (IAM)”Identity and access management connects three questions: who is this person, what may they do, and how should their access change over time? Authentication establishes identity; authorization determines permitted actions; lifecycle management maintains accounts as people join, change jobs, and leave.
These practices apply to on-premises systems, custom applications, cloud services, and SaaS. Start with the comparison, then explore sign-in protocols and account lifecycle automation. This category also provides a home for multifactor authentication (MFA), role-based and attribute-based access control (RBAC and ABAC), identity governance and administration (IGA), and privileged access management (PAM).
Categories
Section titled “Categories”Articles
Section titled “Articles”- SSO vs. Account Provisioning: Key DifferencesCompare SSO and account provisioning, understand JIT and the roles of SAML, OIDC, and SCIM, and plan joiner, mover, and leaver processes.
- What Is Single Sign-On (SSO)?Learn how SSO works through SAML and OpenID Connect, how IdPs and applications establish trust, and what to check for MFA, sessions, outages, and offboarding.
- What Is Account Provisioning? SCIM and ImplementationUnderstand SCIM users, groups, and identifiers, then add provisioning to existing SSO with account matching, data-retention checks, a staged rollout, and troubleshooting.