CASE Identity & Access Management Flashcards

What is OAuth 2.0 primarily designed for?

Answer: Authorization delegation allowing third-party applications to access user resources without exposing credentials

OAuth 2.0 is an authorization framework that enables applications to obtain scoped, delegated access to user resources without handling the user's credentials.

What is the distinction between authentication and authorization?

Answer: Authentication verifies who you are; authorization determines what you are permitted to do

Authentication confirms a user's identity, while authorization determines which resources and actions that verified identity is permitted to access.

What does Privileged Access Management (PAM) address?

Answer: Securing, managing, and monitoring accounts with elevated administrative permissions

PAM solutions control and audit privileged account access to critical infrastructure, reducing risk from insider threats and compromised administrative credentials.

What is a JSON Web Token (JWT)?

Answer: A compact, self-contained token for securely transmitting signed claims between parties

A JWT is a compact, digitally signed token encoding claims that can be verified because the signature ensures tamper detection.

What does OpenID Connect (OIDC) add on top of OAuth 2.0?

Answer: An identity and authentication layer providing standardized user identity via ID tokens

OIDC extends OAuth 2.0 with a standardized authentication layer, introducing ID tokens that carry verified user identity claims.

What is the purpose of account provisioning?

Answer: Creating, configuring, and assigning user accounts and access rights when users join or change roles

Account provisioning is the process of creating and configuring user accounts with appropriate permissions aligned to the user's role.