Identity and Access Management Terms and Concepts Flashcards

Define biometrics in the context of authentication.
"SFA is a security process that requires only one method of authentication, such as a password, to verify the identity of the user."
What is the difference between authentication and authorization?
"Authentication is the process of verifying the identity of a user, while authorization is the process of granting or denying access to resources based on the user's identity."
Explain the concept of role-based access control (RBAC).
"A digital certificate is an electronic document used to prove the ownership of a public key, typically issued by a certificate authority (CA)."
"Biometrics refers to the use of physical characteristics, such as fingerprints, facial recognition, or iris scans, to verify identity."
Define single-factor authentication (SFA).
What is a digital certificate?
What is an identity provider (IdP)?
RBAC is a method of regulating access to computer or network resources based on the roles of individual users within an enterprise.
"An IdP is a system or service that creates, maintains, and manages identity information for principals and provides authentication services to relying applications within a federation or distributed network."