The identity terms that matter, in plain English

Periodically re-certifying that people still need the access they have.

Microsoft's on-premises directory service for Windows networks.

Legacy on-prem federation for single sign-on to cloud apps.

Policy engine that allows, blocks, or challenges sign-ins based on signals.

The tool that synchronizes on-prem Active Directory to Entra ID.

Scripting identity operations via the Microsoft Graph API and PowerShell.

The identity lifecycle: provisioning, changes, and deprovisioning.

Microsoft's cloud identity and access management service.

Requiring two or more proofs of identity to sign in.

Syncing a hash of the password hash so Entra ID can authenticate users.

MFA methods that can't be intercepted by phishing, like FIDO2 and Windows Hello.

Just-in-time, approval-based elevation instead of standing admin rights.

Granting access through roles tied to job functions, not to individuals.

A standard for automatically provisioning user accounts to apps.

Separating administrative control by asset value to contain attacks.

Never trust by default; verify every request explicitly.