EXPLORE THE KNOWLEDGE BASE

Fundamentals

Build a shared vocabulary. Understand identities, authentication, authorization, and the principles behind access.

6 articlesStart with the foundations

The purpose, scope, and everyday questions of identity and access management.

Three related concepts that should never be treated as interchangeable.

Establishing who is acting and deciding what that subject may do.

Least privilege, explicit decisions, separation of duties, and accountable ownership.

Describe how much confidence a system needs in proofing, authentication, and federation, and why those are separate dimensions.

A quick reference to the terms and abbreviations used throughout the handbook.