IAM Logs

An authentication proxy connects two protocol segments and thereby forms a protocol endpoint; it can transform and forward authentication requests and responses, and can be part of an intermediary. Because it terminates the protocol on both sides it sees the content of what it fo...

Quiz: IAM / IAM Glossary (eCH-0219) | updated: Sep 17, 2026

Single sign-on is an authentication procedure in which a subject authenticates once to gain access to several resources without authenticating again each time. It is usually enabled by central authentication services such as identity providers and by protocols such as Kerberos, S...

Quiz: IAM / IAM Glossary (eCH-0219) | updated: Sep 17, 2026

A trusted third party is an independent, trustworthy entity that ensures authenticity, integrity or confidentiality of information and transactions in security and identity systems, for example a certification authority in a PKI or an identity provider in a federation; the trust...

Quiz: IAM / IAM Glossary (eCH-0219) | updated: Sep 17, 2026

A memorized secret is a knowledge-based authentication means where the subject authenticates by entering a secret only it knows, such as a password, PIN or security question; a password is a confidential character string agreed between subject and verifier at registration and use...

Quiz: IAM / IAM Glossary (eCH-0219) | updated: Sep 17, 2026

Challenge-response is an interactive procedure for proving knowledge without revealing it: the prover solves one or more challenges from the verifier, and only someone who knows the secret can produce the correct response with high probability. * Proving knowledge of a secret wi...

Quiz: IAM / IAM Glossary (eCH-0219) | updated: Sep 17, 2026

A wallet is a digital application that lets subjects store, manage and use their cryptographic keys, verifiable credentials and similar items in a decentralised way. Synonym: identity wallet. In the Swiss E-ID the wallet is the swiyu app. Go deeper: The Swiss e-ID (eid.admin.ch...

Quiz: IAM / IAM Glossary (eCH-0219) | updated: Sep 17, 2026

The client platform is the system or device from which the subject starts an authentication process, such as a browser on a PC or an app on a mobile device. Synonyms: client, user agent. Its trustworthiness bounds the assurance of any authentication started from it.

Quiz: IAM / IAM Glossary (eCH-0219) | updated: Sep 17, 2026

The topology describes the arrangement of the various entities, such as IdPs and RPs, and their logical connections. Typical topologies are isolated identities, central identities, RP-centred, IdP-centred, full-mesh and hub-and-spoke federations, and provisioning.

Quiz: IAM / IAM Glossary (eCH-0219) | updated: Sep 17, 2026

Kerberos is a network-based authentication protocol that provides mutual authentication between clients and services, using a ticket system and a central trusted instance, the Key Distribution Center (KDC), which issues the tickets and thereby enables single sign-on. * The Kerbe...

Quiz: IAM / IAM Glossary (eCH-0219) | updated: Sep 17, 2026

Revocation is the process of declaring permissions, authentication means, digital certificates, verifiable credentials or similar invalid, so that the element is no longer trusted or usable; a certificate revocation list is a CA-published list of certificates revoked before their...

Quiz: IAM / IAM Glossary (eCH-0219) | updated: Sep 17, 2026