Legacy anti-patterns
Bastion-For-Everything Pattern
Bastion-for-everything is the design reflex of routing almost every access scenario through a bastion regardless of its nature.
Identity and Access Management glossary
Explore the concepts used across Identity and Access Management, Identity Governance, Access Management, privileged access, authorization and identity security.
Definitions are organized to support search and navigation between related concepts.
Search for a term
Browse by letter
Filter by category
Glossary terms
19 terms
- Legacy anti-patterns
Deprecated Enterprise SSO
Deprecated Enterprise SSO is a desktop credential-injection approach used to replay application logins on behalf of users.
eSSO - Legacy anti-patterns
Deprecated WebSSO
Deprecated WebSSO is a legacy single sign-on pattern based on proxy-style interception rather than modern federation standards.
- Legacy anti-patterns
Distributed Secret Storage
Distributed secret storage is the practice of keeping credentials in many scattered locations instead of managing them in a centralized secure platform.
- Legacy anti-patterns
Embedded Authorization Logic
Embedded authorization logic is the practice of keeping access rules hardcoded inside each application instead of externalizing decisions to a policy layer.
- Legacy anti-patterns
Flat Network
A flat network is an environment with weak segmentation, enabling broad movement across systems after compromise.
- Legacy anti-patterns
Glass Break Without Governance
Glass break without governance is the uncontrolled creation or use of emergency access paths outside formal oversight.
- Legacy anti-patterns
Hardcoded Secret
A hardcoded secret is a password, token, key, or credential embedded directly in code or configuration.
- Legacy anti-patterns
IAM Anti-Pattern
An IAM anti-pattern is a design habit that repeatedly creates security, governance, or operational problems.
- Legacy anti-patterns
Legacy IAM Pattern
A legacy IAM pattern is an access or identity design that still works operationally but no longer matches modern security expectations.
- Legacy anti-patterns
Legacy Role Rigidity
Legacy role rigidity is the situation in which static role models become too inflexible to support real operational needs.
- Legacy anti-patterns
Machine-to-Machine Through Bastion
Machine-to-machine through bastion is the attempt to secure API or service-to-service flows with bastion-style privileged access patterns designed for humans.
- Legacy anti-patterns
Orphan Privilege
An orphan privilege is a right or privileged capability that remains active without a valid current business justification.
- Legacy anti-patterns
Password Sharing
Password sharing is the use of the same human or technical credential by multiple actors.
- Legacy anti-patterns
Secret sprawl
Secret sprawl is the uncontrolled spread of credentials across systems, code, teams, and storage locations.
- Legacy anti-patterns
Secrets Duplication
Secrets duplication is the repeated storage of the same credential in multiple technical stores or systems.
- Legacy anti-patterns
Session-Recording-Only Traceability
Session-recording-only traceability is an approach that relies mainly on bastion video or replay logs to provide audit evidence.
- Legacy anti-patterns
Shared Administrative Account
A shared administrative account is a privileged account used by several administrators or team members.
- Legacy anti-patterns
Static API Key
A static API key is a fixed application secret used for API access without the contextual properties of modern token-based identity patterns.