Identity Security, Decoded.

Discover the terms behind orphan accounts, disconnected apps and last-mile identity work, explained in plain language.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
No terms match your search. Try a different word or clear the filters.

Account Aggregation

Account aggregation is the process of collecting accounts, entitlements, roles, and status from applications into a central identity platform so governance, reviews, and analytics reflect who actually has access.

Read definition

Application Onboarding (Identity)

Application onboarding in identity is the process of connecting an application to the IdP and IGA so authentication, provisioning, aggregation, and reviews can run through central controls instead of local admin work.

Read definition

Access Certification

Access certification (also called a user access review) is a periodic campaign where managers or application owners confirm that existing accounts and entitlements are still appropriate.

Read definition

Identity Governance and Administration (IGA)

Identity governance and administration (IGA) is the discipline and tooling for defining who should have access to what, enforcing those decisions across applications, reviewing access over time, and producing audit evidence.

Read definition

SCIM (System for Cross-domain Identity Management)

SCIM (System for Cross-domain Identity Management) is an open standard for automating the exchange of user identity information between identity systems and applications.

Read definition

Joiner-Mover-Leaver (JML)

Joiner-mover-leaver (JML) is the identity lifecycle process that creates access when someone joins, updates access when they change roles, and removes access when they leave.

Read definition

Last-Mile Provisioning

Last-mile provisioning is the final execution step that creates, updates, or removes an account or entitlement inside the target application after an identity platform has approved the change.

Read definition

Orphaned Accounts

Orphaned accounts are application accounts that remain active after the person or process that owned them is gone, or that were never linked to a valid identity record.

Read definition

Disconnected Applications

Disconnected applications are business applications that are not fully integrated with an organization's identity systems (IdP, IGA, or PAM).

Read definition

Deprovisioning

Deprovisioning is the process of revoking user access by disabling or removing accounts and entitlements when someone leaves, changes roles, or no longer needs a resource.

Read definition

Close Your IAM Blast Radius.

See how Redblock replaces ticket-driven identity execution with continuous lifecycle enforcement across your application estate.

Book a Demo
Book a Demo