Glossary 🔑 IAM

Identity & Access Management (IAM)

Multi-Factor Authentication (MFA)

Requires a second proof of identity, like a phone app code or security key, in addition to a password.

A code only you can see, on a device only you hold — so a stolen password alone won't open the lock.

Why this matters

Stolen or reused passwords are one of the most common ways attackers get into small-business accounts, so strong sign-in controls close a very common door.

You might see this as

Microsoft Entra IDOktaCyberArk

More in IAM

Active Directory / Entra IDMicrosoft's directory services that store user accounts and groups and control sign-in to company systems.Single Sign-On (SSO)Lets staff sign in once with one company account to reach many apps, instead of juggling separate passwords.Passwordless authenticationSigning in with a passkey, security key, or device biometrics instead of a password that can be guessed or phished.Privileged Access Management (PAM)Tightly controls, records, and limits the powerful admin accounts that can change or delete important systems.Role-Based Access Control (RBAC)Grants permissions based on a person's job role, so people get only the access their work requires.Conditional AccessRules that allow, block, or add checks to a sign-in based on context like location, device, or risk.Just-In-Time (JIT) accessGives elevated permissions only when needed and only for a limited time, then removes them automatically.Identity GovernanceProcesses for approving, reviewing, and removing access over time, such as when people join, change roles, or leave.

Want help with iam?

Tell me what you have and I'll tell you which few things actually matter for you.

Get in touchSee what I offer