identity federation Flashcards
what does identity federation do?
using credentials from one account to log onto multiple systems
how does toke based authentication work?
when your login into a server is successful, the server will create a token for authentication
what is the token use for?
by using the toke, we avoid exchanging credentials.
why does toke has a short lived?
if token that last for week or months, they could led to serious problems. as a result toke has short live and is regenerated by the server within the same session
what is IAM
identity and access management systems
SSO
single sign-on. it is a subset of identity federation
how does SSO work?
one set of credential to access multiple apps or systems within the same organization.
what is SAML
it stand for security assertion markup language.
it’s standard for sso implementations
authentication between two parties
what is OAuth
standard for authorization between two parties
Authorizes servers, devices and APIs to run application on behalf other
OIDC
OpenID Connect
standard for single sign-on implementations
build on top of OAuth
