IAM

Identity and Access Management — the discipline of managing digital identities and their access.

IAM spans the full identity lifecycle — provisioning, authentication, authorization, and prompt de-provisioning when a user leaves (orphaned accounts are a classic audit finding). Federated identity (SAML, OIDC) extends IAM across organizational boundaries so one identity provider can grant access to many services, enabling single sign-on without each app storing its own credentials.

Related terms

Back to General Security Concepts