What is an object (Objekt) in IAM, and when does it become a subject?

An object is a natural person, an acting organisation or an entity that takes part in or is referenced by a digital process; it becomes a subject the moment it authenticates in that process.

The distinction matters for people and things that appear in a process without acting: a person referenced in a document, a device listed in an inventory. Only when the object proves an identity does it turn into a subject that can be authorised. Objects can contain other objects: organisations contain sub-organisations, things contain things.

Go deeper:

• Object (NIST glossary) — the passive counterpart that contains or receives information.