From CISO Marketplace — the hub for security professionals Visit

Authentication

Identity & Access

Definition

Verifying user identity through passwords, biometrics, or security tokens to grant system access.

Technical Details

Authentication is the process of verifying the identity of a user, device, or system. It typically involves the use of credentials such as passwords, biometric data (e.g., fingerprints, facial recognition), or security tokens (e.g., one-time passwords generated by an authenticator app). Two primary methods of authentication are single-factor authentication (SFA), which relies on one type of credential, and multi-factor authentication (MFA), which requires two or more distinct forms of verification to enhance security. The authentication process may utilize various protocols such as OAuth, Kerberos, or RADIUS to facilitate secure identity verification.

Practical Usage

Authentication is critical in safeguarding access to sensitive information and resources within organizations. It is commonly implemented in various settings, including online banking, corporate networks, and personal devices. For instance, many financial institutions require customers to enter a password and a code sent to their mobile device (MFA) to access their accounts. In corporate environments, employees may need to use biometric scans along with their employee ID to log into secure systems. Additionally, many applications utilize single sign-on (SSO) systems to streamline the authentication process across multiple services while maintaining security.

Examples

Related Terms

Authorization Identity Management Single Sign-On (SSO) Multi-Factor Authentication (MFA) Access Control
← Back to Glossary