Identity Types

The practice of regulating access to resources or systems based on permissions and authorization policies. Secrets managers implement access control mechanisms to restrict who can view, modify, or retrieve stored secrets, ensuring that only authorized users or applications have access.

Categories:

Daemon Identity

Identity Types

A daemon identity represents the unique ID and permissions assigned to a background process or service that runs without any human interaction. These daemon applications run continuously on servers or in the cloud, handling tasks like backups, data synchronization, and automated monitoring.

Workload IGA

Identity Types

Workload IGA (Identity Governance and Administration for Workloads) extends traditional identity governance principles, such as access reviews, provisioning, and policy enforcement, to non-human identities like applications, services, and AI agents. It ensures that every workload has the right access, at the right time, for the right purpose.

Client Credentials

Identity Types

Client credentials are authentication tokens used by non-human entities (like applications, services, APIs, and automated scripts) to prove their identity and obtain access to protected resources. Unlike user credentials that require interactive sign in, client credentials enable crucial machine-to-machine communication without any human involvement. In OAuth 2.0, the client credentials grant type is a specific flow where a client application proves its identity directly to a server using its own credentials (usually a client ID and client secret) to receive a temporary access token.

Bearer Token

Identity Types

A bearer token is an access token that grants the bearer (whoever holds it) the right to use a protected resource without additional identity proof. It is sent in an HTTP Authorization: Bearer header and treated like a “key” for access.

Machine Credentials

Identity Types

Machine credentials are digital secrets, such as API keys, access tokens, SSH keys, or certificates, that allow software-based entities (like applications, workloads, and agents) to authenticate and access other systems autonomously. They serve as the identity proof for machines communicating within and across networks.

Non-Human Identity

Identity Types

A non-human identity (NHI) is a digital identity assigned to a software-based entity, such as an application, service, workload, API, and AI agent, that needs to authenticate and access resources autonomously. It functions much like a user account but is designed for machines, not people.

API Key

Identity Types

Machine Learning Identity

Identity Types

An identity associated with a machine learning model or algorithm, used to authenticate and authorize access to data, resources, or computational resources. Machine learning identities enable secure and controlled access to sensitive information and computational resources.

JWT (JSON Web Token)

Identity Types

A compact, URL-safe means of representing claims to be transferred between two parties, commonly used for secure authentication and authorization in distributed systems.

Robotic Process Automation (RPA) Identity

Identity Types

An identity assigned to a software robot or bot used for automating repetitive tasks or workflows. RPA identities enable secure authentication and access control for robotic process automation solutions.