LDAP (Lightweight Directory Access Protocol) is the standard protocol for querying and updating a company's directory of users, computers and groups, such as Active Directory. Kerberos is the protocol that verifies user identity with encrypted tickets so passwords do not travel across the network. Together they underpin sign-in and authentication in Windows (Active Directory) domains.
Related term in this glossary: Domain controller
LDAP, Kerberos, Active Directory, directory protocol, LDAPS
Related terms
Strong password
A strong password is long, unique to each service and hard to guess, ideally a passphrase of several words with at least 14 characters. Length matters more than mixing symbols, and it works best alongside a password manager and multi-factor authentication, because even a strong password is useless once it is reused or leaked.
CAPTCHA
A CAPTCHA is a test a website uses to tell a person from an automated program, such as typing distorted letters, picking images or simply checking a box. It protects sign-up, login and checkout forms against bots that try stolen passwords or generate spam.
SSO (single sign-on)
SSO (single sign-on) lets people access many applications with one account and one sign-in instead of a password per system. It makes work easier, cuts down on weak or reused passwords and lets you remove all of a person's access from one place when they leave the company.
Conditional access
Conditional access is the Microsoft Entra ID feature that decides whether to allow, block or require an extra step at sign-in based on context: who the user is, what device they are on, where they are signing in from and how risky the sign-in looks. For example, it can require MFA outside the office or block devices the company does not manage.
PKI and digital certificates
PKI (public key infrastructure) is the framework of policies, certificate authorities and cryptographic keys that issues and validates digital certificates. A digital certificate is a file that works like an official ID on the internet: it confirms that a website, server or person is who they claim to be and enables encrypted communication, as with the HTTPS padlock.
Ready to put this into practice in your operation?
Tell us what you need and a TecnetOne engineer will get back to you.
Talk to an engineerTalk to an engineer
Tell us what you need and we’ll reply the same business day.