Identity and Access Management Terms and Concepts Flashcards

"LDAP, or Lightweight Directory Access Protocol, is an open, vendor-neutral, industry standard for accessing and maintaining distributed directory information services over an IP network."
Define single-factor authentication (SFA).
What are access control lists (ACLs)?
Define privileged access management (PAM).
What is an identity provider (IdP)?
"SFA is a security process that requires only one method of authentication, such as a password, to verify the identity of the user."
"ACLs are a set of rules that allow or deny access to network resources, based on user identities or other criteria."
The principle of least privilege states that users should be granted the minimum levels of access – or permissions – needed to perform their job functions.
Explain the use of LDAP in identity management.
"An IdP is a system or service that creates, maintains, and manages identity information for principals and provides authentication services to relying applications within a federation or distributed network."
What is the principle of least privilege?
"PAM is the process of managing and controlling access to critical systems and data by privileged users, including administrators and superusers."