Authentication and Access

LDAP, RADIUS, SAML, OAuth/OIDC, MFA and session terms.

• What is the difference between authentication and authorization?GEN-06-001
• What is LDAP; where is it used in TR7?GEN-06-002
• What is Active Directory; how does it relate to LDAP?GEN-06-003
• What is RADIUS; where is it used in TR7?GEN-06-004
• What is SAML 2.0?GEN-06-005
• What is the difference between an IdP (Identity Provider) and an SP (Service Provider)?GEN-06-006
• What is SSO (Single Sign-On)?GEN-06-007
• What is OAuth 2.0?GEN-06-008
• What is OpenID Connect (OIDC)?GEN-06-009
• What is the difference between MFA and 2FA?GEN-06-010
• What is an OTP (One-Time Password)?GEN-06-011
• What is TOTP?GEN-06-012
• What is a session; in which senses is it used in TR7?GEN-06-013
• What is RBAC (Role-Based Access Control); how is it applied in TR7?GEN-06-014
• What is the least privilege principle; how is it met in TR7 user management?GEN-06-015
• What is the difference between LDAP and LDAPS?GEN-06-016
• What are a DN (Distinguished Name) and a Base DN in LDAP?GEN-06-017
• What is an LDAP search filter; how is it read?GEN-06-018
• What is the shared secret in RADIUS and TACACS+?GEN-06-019
• What is TACACS+; how does it differ from RADIUS?GEN-06-020
• What is AAA (Authentication, Authorization, Accounting); what is an accounting record for?GEN-06-021
• What is a SAML assertion?GEN-06-022
• What is SAML metadata?GEN-06-023
• What is the difference between an access token and an ID token?GEN-06-024
• What are the client ID and client secret?GEN-06-025
• What is an OAuth scope?GEN-06-026
• What is a JWT (JSON Web Token); where is it used in TR7?GEN-06-027
• What is a Bearer Token?GEN-06-028
• What is a RADIUS attribute?GEN-06-029
• What is identity federation?GEN-06-030
• What is an issuer; what is the OIDC discovery document (.well-known/openid-configuration) for?GEN-06-031
• What is a claim; how does it differ from a SAML attribute?GEN-06-032