The identity terms that matter, in plain English

Formal attestation that access is still appropriate — ideally followed by remediation.

Periodically re-certifying that people still need the access they have.

Microsoft's on-premises directory service for Windows networks.

Legacy on-prem federation for single sign-on to cloud apps.

Policy engine that allows, blocks, or challenges sign-ins based on signals.

A discrete unit of access that can be granted, reviewed, and revoked.

The tool that synchronizes on-prem Active Directory to Entra ID.

The discipline of authenticating users and authorizing what they can reach.

Scripting identity operations via the Microsoft Graph API and PowerShell.

Policies and processes that ensure the right people have the right access — and can prove it.

Finding and cleaning stale, empty, and overly privileged identity objects.

The identity lifecycle: provisioning, changes, and deprovisioning.

Microsoft's cloud identity and access management service.

Requiring two or more proofs of identity to sign in.

Syncing a hash of the password hash so Entra ID can authenticate users.

MFA methods that can't be intercepted by phishing, like FIDO2 and Windows Hello.

Just-in-time, approval-based elevation instead of standing admin rights.

Granting access through roles tied to job functions, not to individuals.

A standard for automatically provisioning user accounts to apps.

Separating administrative control by asset value to contain attacks.

Never trust by default; verify every request explicitly.