Systems and processes are used to manage access to information in an organization to ensure that the right individuals have access to the right resources at the right times for the right reason.

Core IAM Concepts

IAAA of Security

Other IAM Concepts

Provisioning

Process of creating new user accounts, assigning them appropriate permissions, and providing users with access to systems

Deprovisioning

Process of removing an individual’s access rights when the rights are no longer required

Identity Proofing

Process of verifying the identity of a user before the account is created

Interoperability

The ability of different systems, devices and applications to work together and share information
e.g. SAML, OpenID Connect

Attestation

Process of validating that user accounts and access rights are correct and up-to-date