KuppingerCole Analysts Name LoginRadius a CIAM Leader Again in 2026 Get Report

Glossary of Identity & Access Management Terms

Explore LoginRadius's comprehensive glossary of key terms in identity, authentication, authorization, CIAM, and B2B IAM. Quickly find definitions and deepen your understanding of modern identity concepts.

A

• AAL (Authenticator Assurance Level)
• Access Token
• Account Linking
• Account Lockout
• Active Directory
• Adaptive Authentication
• Adaptive MFA
• Anonymous Authentication
• Application Owner
• Attribute-Based Access Control (ABAC)
• Audit Logs
• Authentication
• Authorization
• Authy

B

• B2B IAM
• B2B Identity
• B2C Identity (CIAM)
• B2E Identity
• Biometric Login
• Bot Detection
• Breached Password Detection
• Bring Your Own Identity (BYOI)
• Brute-Force

C

• CCPA (California Consumer Privacy Act)
• Central Authentication Service (CAS)
• CIAM
• Conditional Access Control
• Consent Management
• Context-based Authentication
• Credentials
• Cross Device SSO

D

• Data Residency
• Delegated Admin Portal
• Delegated Administration
• Device Health State
• Device Profiling
• Device Tagging
• Digital Identity
• Directory
• Directory Service

E

• Email OTP
• Embedded Login

F

• FaceID
• Fast Identity Online (FIDO2)
• Federation
• Federation Broker
• Feitian Security Key
• FIDO
• Fine-Grained Authorization

G

• GDPR (General Data Protection Regulation)
• Google Authenticator
• Google Titan
• Graph-based directory services
• Groups

H

• Hardware Token
• HIPAA (Health Insurance Portability and Accountability Act)

I

• IAM (Identity Access Management)
• ID Token (Identity Token)
• IDaaS (Identity as a Service)
• Identity
• Identity and Access Governance
• Identity as a Service (IDaaS)
• Identity Brokerage
• Identity Deprovisioning
• Identity Federation
• Identity Governance & Administration (IGA)
• Identity Management System
• Identity Orchestration
• Identity Proofing
• Identity Provider (IdP)
• Identity Provisioning
• Identity Repository
• Identity Repository Services
• Identity Theft
• Identity Verification
• IDP (Identity Provider)
• Inbound SSO
• Incident Response Planning

J

• JSON Web Token (JWT)
• Just-in-Time Provisioning

K

• Kensington
• Kerberos

L

• LDAP

M

• Magic Link
• MFA (Multi-factor Authentication)
• MFA (Multifactor Authentication)
• MFA Quick Guide
• Microsoft Authenticator
• Multi-Tenancy / Tenant
• Multipass

N

• Network Profiling
• Nonce

O

• OAuth
• OAuth 1
• OAuth 1.0a
• OAuth 2.0
• OAuth vs OpenID Connect
• One-Time Password (OTP)
• OneSpan DigiPass
• OpenID
• OpenID Connect
• Organization Mapping
• OTP
• Out-of-Band Authentication
• Outbound SSO

P

• Partner IAM
• Passkeys
• Password Expiration
• Password Hashing
• Password Hygiene
• Password Manager
• Password Policy
• Passwordless
• Permissions
• PKCE (Proof Key for Code Exchange)
• PKI (Public Key Infrastructure)
• Privacy by Design
• Privacy Policy

R

• RADIUS
• Refresh Token
• Remember Me
• Right to Be Forgotten
• Risk-based Authentication
• Role-Based Access Control
• Roles
• RSA SecurID

S

• SAML
• SAML 2.0
• SAML Assertion
• SAML Consumer Service
• SCA (Strong Customer Authentication)
• SCIM
• SDK (Software Development Kit)
• Self-Serve Model
• Service Provider (SP)
• Session
• Single Logout (SLO)
• SMS OTP
• SOC 2
• Social Login
• Social Sign-In
• SSO
• Strong Customer Authentication (SCA)
• Suspicious IP Throttling
• Symantec VIP

T

• Tenant Mapping
• Time-Based One-Time Password (TOTP)
• Touch ID
• 2FA (Two-Factor Authentication)

U

• User Activity
• User Management
• User Profile
• User Profiling

W

• Web Access Management (WAM)
• WebAuthn
• Webhooks

Y

• YubiKey

Z

• Zero Trust Security