Identity & Access Management: Page

What is Kerberos and how does it work?

Kerberos is a protocol for authenticating service requests between trusted hosts across an untrusted network, such as the internet.

By Peter Loshin, Michael Cobb, Rahul Awati • March 10, 2025

What is a certificate authority (CA)?

A certificate authority (CA) is a trusted entity that issues digital certificates to authenticate content sent from web servers.

By Peter Loshin, Rahul Awati • March 7, 2025

What is multifactor authentication?

Multifactor authentication (MFA) is an IT security technology that requires multiple sources of unique information from independent categories of credentials to verify a user's identity for a login or other transaction.

By Kinza Yasar, Stephen Bigelow, Mary Shacklett • Feb. 28, 2025

What is federated identity management (FIM)? How does it work?

Federated identity management (FIM) is an arrangement between multiple enterprises or domains that enables their users to use the same identification data (digital identity) to access all their networks.

By Alexander Gillis, Linda Rosencrance, Rahul Awati • Feb. 27, 2025

How to build an effective IAM architecture

Identity and access management is changing and so must strategies for managing it. Read up on IAM architecture approaches and how to select the best for your organization.

By Ed Moyle • Feb. 21, 2025

What is challenge-response authentication?

In computer security, challenge-response authentication is a set of protocols used to protect digital assets and services from unauthorized users, programs and activities.

By Linda Rosencrance, Cameron Hashemi-Pour • Feb. 19, 2025

Fortinet discloses second authentication bypass vulnerability

Fortinet disclosed CVE-2025-24472 in an updated advisory that confused some in the infosec community because it stated that 'reports show this is being exploited in the wild.'

By Alexander Culafi • Feb. 12, 2025

Benefits and challenges of passkeys in the enterprise

Passkeys overcome some of the critical security vulnerabilities plaguing passwords. But enterprises face some new challenges when deploying the authentication technology.

By Jerald Murphy • Feb. 11, 2025

What is privileged access management (PAM)?

Privileged access management (PAM) is a security framework designed to protect organizations against cyberthreats by controlling and monitoring access to critical information and resources.

By Kinza Yasar, Sarah Lewis • Feb. 11, 2025

What is the RSA algorithm?

The RSA algorithm (Rivest-Shamir-Adleman) is a public key cryptosystem that uses a pair of keys for securing digital communication and transactions over insecure networks, such as the internet.

By Kinza Yasar , Michael Cobb • Feb. 11, 2025

7 key identity and access management benefits

Identity and access management benefits users, security and IT admins, and it also improves an organization's security posture. Read up on seven key advantages of IAM.

By Sharon Shea , Andrew Froehlich • Feb. 7, 2025

Comparing top identity and access management certifications

Holding an identity and access management certification demonstrates knowledge of security fundamentals, plus it can yield rewarding career and networking opportunities.

By Paul Kirvan, Katie Donegan • Feb. 5, 2025

What is a certificate revocation list (CRL) and how is it used?

A certificate revocation list (CRL) is a list of digital certificates that have been revoked by the issuing certificate authority (CA) before their actual or assigned expiration date.

By Rahul Awati , Michael Cobb • Jan. 31, 2025

What is biometric verification?

Biometric verification is any means by which a person can be uniquely identified by evaluating one or more distinguishing biological traits.

By Michael Cobb, Alexander Gillis, Rahul Awati • Jan. 31, 2025

What is biometrics?

Biometrics is the measurement and statistical analysis of people's unique physical and behavioral characteristics.

By Peter Loshin, Alexander Gillis, Cameron Hashemi-Pour • Jan. 31, 2025

What is a password?

A password is a string of characters used to verify the identity of a user during the authentication process.

By Madelyn Bacon, Rahul Awati • Jan. 30, 2025

What is SAML (Security Assertion Markup Language)?

Security Assertion Markup Language (SAML) is an open standard for sharing security information about identity, authentication and authorization across different systems.

By Peter Loshin, Kinza Yasar • Jan. 24, 2025

Adopt passkeys over passwords to improve UX, drive revenue

Password use leads to higher UX friction and lost sales because customers want a smoother sign-in experience. Passkeys can simplify authentication and improve UX.

By Andrew Shikiar, Dhiraj Kumar • Jan. 17, 2025

The basics drive 2025 identity security investments

New identity security tech might steal headlines, but Informa TechTarget's Enterprise Strategy Group analyst Todd Thiemann shows the basics get the most attention from businesses.

By Todd Thiemann • Jan. 3, 2025

Identity and access management tools and features for 2025

The IAM tool marketplace is complex and ever-changing. Learn about key features and how to discern what your organization needs before approaching potential providers.

By Ed Moyle • Dec. 20, 2024

What is a public key certificate?

A public key certificate is a digitally signed document that serves to validate the sender's authorization and name.

By Rahul Awati • Dec. 19, 2024

Are password managers safe for enterprise use?

Password managers have benefits, but they are also subject to attacks that can put organizations at substantial risk. So, are they safe?

By Matthew Smith • Dec. 17, 2024

The pros and cons of biometric authentication

Biometric authentication can be a solid supplement to passwords when securing data and systems. But understanding potential drawbacks, and planning to minimize them, is essential.

By Char Sample • Dec. 17, 2024

What is passwordless authentication?

Passwordless authentication allows a user to sign into a service without using a password. This is often done using certificates, security tokens, one-time passwords (OTPs) or biometrics.

By Kinza Yasar, Gavin Wright, Alexander Gillis • Dec. 17, 2024

What is PKI (public key infrastructure)?

PKI (public key infrastructure) is the underlying framework that enables the secure exchange of information over the internet using digital certificates and public key encryption.

By Rahul Awati • Dec. 17, 2024