Glossary 🔑 IAM

Identity & Access Management (IAM)

Active Directory / Entra ID

Microsoft's directory services that store user accounts and groups and control sign-in to company systems.

Why this matters

Stolen or reused passwords are one of the most common ways attackers get into small-business accounts, so strong sign-in controls close a very common door.

You might see this as

Microsoft Entra IDOktaCyberArk

More in IAM

Single Sign-On (SSO)Lets staff sign in once with one company account to reach many apps, instead of juggling separate passwords.Multi-Factor Authentication (MFA)Requires a second proof of identity, like a phone app code or security key, in addition to a password.Passwordless authenticationSigning in with a passkey, security key, or device biometrics instead of a password that can be guessed or phished.Privileged Access Management (PAM)Tightly controls, records, and limits the powerful admin accounts that can change or delete important systems.Role-Based Access Control (RBAC)Grants permissions based on a person's job role, so people get only the access their work requires.Conditional AccessRules that allow, block, or add checks to a sign-in based on context like location, device, or risk.Just-In-Time (JIT) accessGives elevated permissions only when needed and only for a limited time, then removes them automatically.Identity GovernanceProcesses for approving, reviewing, and removing access over time, such as when people join, change roles, or leave.

Want help with iam?

Tell me what you have and I'll tell you which few things actually matter for you.

Get in touchSee what I offer