IT Glossary

AI agent governance applies access controls and oversight to autonomous AI agents. Learn what it covers, why it matters, and how it extends IAM.

A machine identity authenticates non-human entities like servers and services. Learn how they work, how they differ from NHIs, and why governance matters.

A non-human identity (NHI) is a digital identity for a machine, service, or AI agent. Learn what NHIs are, why they grow, and why they need governance.

An orphaned account is an active account with no owner. Learn why orphaned accounts are a security risk and how clean deprovisioning eliminates them.

An audit trail is a chronological record of who did what, when. Learn how audit trails work, what they record in IAM, and why compliance needs them.

Software license management tracks and optimizes software licenses across a company. Learn how it works, why it cuts cost, and how Corma automates it.

SaaS discovery finds every app in use, including shadow IT. Learn how SaaS discovery works, its data sources, and why it underpins SaaS control.

Shadow AI is the unsanctioned use of AI tools by employees. Learn the risks of shadow AI, why it differs from shadow IT, and how to bring it under control.

Shadow IT is software used without IT approval. Learn what shadow IT is, the risks it creates, and how SaaS discovery brings it under control with Corma.

SaaS sprawl is the uncontrolled growth of SaaS apps across a company. Learn its causes, risks, and how to regain control with SaaS discovery and Corma.

Entitlement management governs the fine-grained permissions users hold in apps. Learn how it works, how entitlements relate to roles, and why it matters.

Access certification is the documented sign-off proving access was reviewed. Learn how it works, how it differs from reviews, and why auditors need it.

An access review checks that user access is still appropriate. Learn how access reviews work, review vs certification, and how Corma automates them.

Identity lifecycle management governs access from onboarding to offboarding. Learn its stages, how it links to JML, and how Corma automates it.

The Joiner-Mover-Leaver (JML) process manages access across the employee lifecycle. Learn how JML works, its three stages, and how Corma automates it.

Just-in-time (JIT) provisioning creates accounts the moment access is needed. Learn how JIT works, JIT vs standing access, and how it supports Zero Trust.

Deprovisioning removes user access when people leave or change roles. Learn the risks of poor deprovisioning, best practices, and how Corma automates it.

User provisioning creates and manages accounts and access across apps. Learn how provisioning works, manual vs SCIM vs JIT, and how Corma automates it.

Federated identity lets one identity access systems across domains. Learn how identity federation works, federation vs SSO, and where it fits in IAM.

An identity provider (IdP) authenticates users and issues trusted tokens to apps. Learn how an IdP works, IdP vs SP, and how Corma governs IdP access.

Separation of Duties (SoD) splits critical tasks across people to prevent fraud. Learn how SoD works, common conflicts, and how Corma detects them.

Zero Trust is a security model built on "never trust, always verify." Learn its core principles, how it works, and how access control fits in.

The principle of least privilege grants only the minimum access needed. Learn how least privilege works, why it matters, and how Corma enforces it.

Policy-Based Access Control (PBAC) governs access through central policies that blend roles and attributes. Learn how PBAC works and compares to RBAC.

Attribute-Based Access Control (ABAC) grants access using attributes and context. Learn how ABAC works, ABAC vs RBAC, and when to use each model.

Role-Based Access Control (RBAC) grants permissions by role, not per user. Learn how RBAC works, RBAC vs ABAC, and how it supports least privilege.

Customer Identity and Access Management (CIAM) manages external customer identities at scale. Learn how CIAM works and how it differs from workforce IAM.

Privileged Access Management (PAM) secures and monitors high-level access to critical systems. Learn how PAM works, PAM vs IGA, and why it matters.

Identity Governance and Administration (IGA) ensures access is appropriate and auditable. Learn how IGA works, IGA vs PAM, and how Corma automates it.

Identity and Access Management (IAM) controls who can access what. Learn the pillars of IAM, how it differs from IGA, and how Corma delivers it for SaaS.

A passkey is a phishing-resistant credential that replaces passwords using FIDO2 and WebAuthn. Learn how passkeys work and why adoption is accelerating.

Passwordless authentication verifies identity without a password, using biometrics, passkeys, or magic links. Learn how it works and why it matters.

Kerberos is a network authentication protocol using tickets and a trusted KDC. Learn how Kerberos works, where it is used, and how it relates to IAM.

LDAP is a protocol for querying and managing directory services like Active Directory. Learn how LDAP works, where it is used, and how it relates to IAM.

OpenID Connect (OIDC) adds an identity layer on top of OAuth 2.0. Learn how OIDC works, how it compares to SAML, and where it fits in modern SSO.

OAuth 2.0 is the standard for delegated authorization. Learn how OAuth 2.0 works, how it differs from OIDC and SAML, and why it matters for SaaS access.

SCIM automates user provisioning and deprovisioning across apps. Learn how SCIM works, how it differs from SAML, and how Corma extends it to every app.

SAML is an XML standard for exchanging authentication data and enabling SSO. Learn how SAML works, how it differs from SCIM, and where Corma fits in.

Multi-Factor Authentication (MFA) verifies identity with two or more factors. Learn how MFA works, its types, and how it fits IAM compliance with Corma.

Single Sign-On (SSO) lets users access multiple apps with one login. Learn how SSO works, its benefits, and how Corma governs SSO access at scale.