Identity management

The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

Identity management (IDM), sometimes also identity and access management (IAM), deals with how users gain a digital identity, the roles, and sometimes the permission granted to this identity.

Software

There is a number of software which helps doing identity management. Amongst, in alphabetical order, tools and related:

Google Authenticator, two-step auth, using one time passwords.
Initiative for Open Authentication, standardization on how to get an access token for a web API call. Includes passwords, but will in future use WebAuthn.
kanidm, some info here. Successor of LDAP, Kerberos. Server side of WebAuthn.
Kerberos, with Active Directory integration, FreeIPA, some info from a SuSE dev here
LDAP authentication, passwords in a central server.
PAM, linux pluggable authenticaiton modules. Kerberos, LDAP, kanidm, etc. can be plugged into linux.
Security.
Universal 2nd Factor, replaced by WebAuthn.
Users and groups. can be stored on a system or centrally via LDAP, kanidm.
WebAuthn, browser web authentication API, replacement for password authentication, uses Yubikey, or the built-in hardware of a device like TouchID or Windows Hello. Backwards compatible with universal 2nd Factor, server side provided by kanidm e.g.