7 terms
Authentication is the process of verifying that a user, device or service is who it claims to be before a system grants any access to its…
Authorization in cybersecurity is the decision whether an authenticated identity may perform a specific action on a specific resource under a policy.
FIDO2 is the open authentication standard combining WebAuthn and CTAP so users sign in with phishing-resistant public-key credentials instead of passwords.
MFA, multi-factor authentication, requires two or more independent proofs of identity, such as a password plus a phone or security key, before granting access.
A passkey is a FIDO2 credential based on a public and private key pair that replaces passwords with phishing-resistant sign-in bound to one website.
RBAC (role-based access control) grants permissions to roles rather than individual users, so access follows job functions in a manageable way.
SSO (single sign-on) lets a user authenticate once with a central identity provider and then reach many applications without signing in again.