Digital Identity Technology Radar
The Digital Identity Technology Radar is an overview of the standards, protocols, patterns and tools that shape Identity and Access Management. Every entry introduces a technology, outlines the problem it addresses, and places it in the wider identity landscape.
Latest release: , 45 technologies.
Access Management
Access Management focuses on managing user authentication, authorization, and secure access to digital resources. It includes technologies and practices such as Single Sign-On (SSO), multi-factor authentication (MFA), and fine-grained access controls.
Adopt
- Cloud Identity and Access Management (Cloud IAM)
- FIDO2 (WebAuthn / CTAP)
- Identity Orchestration
- OAuth 2.0 Step Up Authentication Challenge
- OAuth 2.1
- OpenID Connect (OIDC)
- FIDO2 Passkeys
- Single Sign-On (SSO)
- Third-Party Identity
Trial
- Client-Initiated Backchannel Authentication (CIBA)
- Model Context Protocol (MCP)
- OAuth 2.0 DPoP
- OAuth Token Exchange and Identity Chaining
Assess
- Agent-to-Agent Protocol (A2A)
- OpenID AuthZEN / P*P
- Shared Signaling Framework (SSF)
- Device Bound Session Credentials (DBSC)
- Grant Negotiation and Authorization Protocol (GNAP)
- OpenID Federation
Hold
Identity Governance and Administration
IGA focuses on managing and governing digital identities and their access rights within an organization. It ensures proper identity lifecycle management, entitlements, compliance, and role-based access controls (RBAC).
Adopt
- CIEM (Cloud Infrastructure Entitlement Management)
- Identity Proofing
- PBAC (Policy-Based Access Control)
- SCIM (System for Cross-domain Identity Management)
- Workload and Machine / Non-Human Identity (NHI) Management
Trial
Privileged Access Management
PAM focuses on securing and managing privileged accounts and access to critical systems and data. It includes technologies like privileged session management, password vaults, and just-in-time access.
Adopt
- AD Bridging
- Privileged Password Management
- Privileged Secret Management
- Privileged Session Recording and Management
Trial
Identity Security
Identity Security focuses on protecting digital identities and securing identity-related processes and data. It includes technologies such as identity-based encryption, biometric authentication, and identity-based threat detection.
Adopt
- Identity Threat Detection and Response (ITDR)
- Security Information and Event Management (SIEM)
- Zero Trust
- Zero Trust Network Access (ZTNA)
Trial
- ISPM (Identity Security Posture Management)
- OWASP Cheat Sheet Series
- Security Orchestration Automation and Response (SOAR)
- Verifiable Credentials (VCs)