The Definitive Resource for Digital Identity

SSO

An authentication method that allows users to log in once and gain access to multiple applications or systems without re-entering credentials for each one.

MFA

A security mechanism that requires users to provide two or more independent verification factors (something you know, have, or are) to authenticate their identity.

An authorization framework that enables third-party applications to obtain limited access to a web service on behalf of a resource owner, without exposing credentials.

OIDC

An identity layer built on top of OAuth 2.0 that allows clients to verify the identity of an end-user and obtain basic profile information using an ID Token.

A security model based on the principle of 'never trust, always verify' that requires strict identity verification for every person and device attempting to access resources, regardless of network location.

An open authentication standard by the FIDO Alliance that enables passwordless authentication using public-key cryptography, comprising the WebAuthn web API and CTAP2 client-to-authenticator protocol.