What is the difference between definition time and runtime?

At definition time the IAM system is set up and configured and digital identities are established; at runtime the digital processes take place in which a subject, on success, gains access to a relying party's resources.

Definition time therefore includes registration, provisioning, identity linking and the definition of access rules; runtime includes authentication, identity mapping, authorisation and access control. Synonym for runtime: execution time.