Federation
Access Token
An Access Token is a token that allows an application to call a protected resource within a limited scope and duration.
Identity and Access Management glossary
Explore the concepts used across Identity and Access Management, Identity Governance, Access Management, privileged access, authorization and identity security.
Definitions are organized to support search and navigation between related concepts.
Search for a term
Browse by letter
Filter by category
Glossary terms
43 terms· Page 1 of 2
- Federation
Artifact Binding
Artifact Binding is a federation pattern where an opaque reference is sent first and the service provider later retrieves the related identity data.
- Federation
Attribute Statement
An Attribute Statement is the part of a SAML assertion that carries identity attributes about the authenticated subject.
- Federation
Audience Restriction
Audience Restriction is a SAML condition that limits an assertion to a specific intended service provider audience.
- Federation
Authenticated Session
An Authenticated Session is the application session created after identity has been successfully validated through a federation flow.
- Federation
Authentication Request
An Authentication Request is the message by which a service provider asks an identity provider to authenticate a user.
- Federation
Authentication Statement
An Authentication Statement is the part of a SAML assertion that describes how and when the user was authenticated.
- Federation
Authentication-Only Modernization
Authentication-Only Modernization is the migration pattern where login is modernized but authorization and lifecycle governance remain largely untouched.
- Federation
Authorization Code
An Authorization Code is a temporary protocol artifact returned after successful authentication and later exchanged for tokens.
- Federation
Authorization Server
An Authorization Server is the OIDC and OAuth component that authenticates the user and issues protocol artifacts such as codes and tokens.
- Federation
Authorization Statement
An Authorization Statement is the part of a SAML assertion that describes authorized actions for the subject.
- Federation
Circle of Trust
A Circle of Trust is the trust relationship that allows service providers to rely on an external identity provider for authentication.
- Federation
Decentralized Identity
Decentralized Identity is an identity model in which the individual controls the sharing of their own identity attributes and proofs.
- Federation
Enterprise SSO
Enterprise SSO is a legacy SSO model where a local component detects application login screens and injects credentials on behalf of the user.
eSSO - Federation
Federation
Federation is a trust model that allows one system to rely on another system's identity assertions for authentication and access initiation.
- Federation
Full OIDC Pattern
The Full OIDC Pattern is the onboarding path where the application uses OpenID Connect as its primary modern authentication model.
- Federation
Holder
In decentralized identity, the Holder is the person or entity that possesses and presents identity proofs.
- Federation
ID Token
An ID Token is the OIDC token that carries the user's identity information for the client application.
- Federation
ID Token Verification
ID Token Verification is the validation process through which the client application confirms that the identity token can be trusted.
- Federation
Identity Proof Minimization
Identity Proof Minimization is the principle of disclosing only the minimum proof or identity information needed for a service decision.
- Federation
Identity Provider
An Identity Provider is the system that authenticates users and issues identity assertions or tokens to relying systems.
IdP - Federation
IdP-Initiated Flow
An IdP-Initiated Flow is a federation flow where access starts from the identity provider side.
- Federation
Issuer
In decentralized identity, the Issuer is the entity that creates and signs identity proofs or credentials.
- Federation
Mobile SSO
Mobile SSO is the set of mechanisms that allow users to reuse authentication across applications on mobile devices.