Identity Access Management

Identity Access Management

1. Directories

   • DN - Distinguished Name
     • CN - Common Name
     • DC - Domain Components
   • Namespaces
   • Directory Types
     • Standard Directory
     • Meta Directory
     • Virtual Directory
   • OU - Organisational Units
   • WAM - Web Access Manager

2. 3 Key Aspects of Issuing Secure Identities & Requirements

   • Uniquness
   • Non-Descriptiveness
   • Issuance
   • Identitification Requirements
     • Unique ID Value
     • Standard Name Schema
     • Non-Descriptive Name Value
     • Not-Sharing Among Users

3. 3 General Authentication Factors

   • Something a person knows
   • Something a person has
   • Something a person is

4. Authentication Methods

   • Credential Management Systems
   • Authoritative Source
   • Authoritative System of Record
   • Profil
   • Password Manager/Vault
   • Password Synchronization
   • Assisted Password Reset
   • Legacy SSO

5. Biometrics

   • Error Types
     • Type I - FRR: False Rejection Rate
     • Type II - FAR: False Acceptance Rate
     • EER - CER: Cross-Over/Equal Error Rate
   • Biometrics Methods
     • Finger Print
     • Palm Scan
     • Hand Geometry
     • Retina Scan
     • Iris Scan
     • Signature Dynamics
     • Key Stroke Dynamics
     • Voice Print
     • Facial Scan
     • Hand Topography

6. Passwords

   • Password Polcy Components
     • Length
     • Complexity
     • Duration
   • Well-Known Password Attack Types
     • Electronic-Monitoring
     • Access the Password File
     • Brute Force
     • Dictionary
     • Social Engineering
     • Rainbow
   • Threshold (Clipping Value)
   • Cognitive Password
   • Best Practise - Show Last Login Attempts
   • One-Time Password
     • Synchronous
       • Time-Based
       • Counter-Based
     • Asynchronous
     • Challenge Response Mechanism
     • Soft-Tokens