Start here · Essential guide
Identity and Access Management Concepts for Business Readers
A plain overview of identity and access management: identities, authentication, authorization, and how they fit into a central IT setup, with trade-offs.
IT and Security
Identity and Access
Core concepts for managing who can reach which systems.
Access Reviews and Recertification
Why periodic checks of who has access matter, and practical ways to make access reviews manageable for the managers and owners who carry them out.
Authentication Versus Authorization
Authentication proves who you are; authorization decides what you may do. Everyday examples show the difference and why mixing them up creates gaps.
Joiners, Movers and Leavers: Managing Access Through Change
How to handle system access when people start, change roles or leave, and why the mover case is the one most often missed in access management.
Multi-Factor Authentication Basics
What counts as an authentication factor, why combining factors helps, and general considerations for rolling out multi-factor authentication in a business.
Privileged Accounts and Why They Need Extra Care
General principles for administrator-level accounts: why they carry extra risk, how organizations commonly limit and oversee them, and when to involve experts.
Role-Based Access Control Explained
How grouping permissions by job role simplifies access management, and how too many overlapping roles, known as role sprawl, can undo the benefits.
Single Sign-On: How It Works and What to Consider
A general explanation of how one login can reach many systems, the benefits for users and administrators, and the trade-off of a central dependency.
The Principle of Least Privilege
What giving people only the access they need means in practice, why it is hard to keep up as roles change, and how to maintain it over time.
Related topics