# Glossary

> Terms and acronyms used in the Ironchip documentation, from AiTM to safe zone: what ENS, FIDO2, ITDR, JIT, OIDC, PAM, RADIUS, SAML and SCIM mean.

URL: https://docs.ironchip.com/en/empezar/glosario/

Short definitions of the technical terms used in the documentation. Ironchip's own concepts are explained in more detail in [Key concepts](https://docs.ironchip.com/en/empezar/conceptos/).

| Term            | Meaning                                                                                                                                      |
| --------------- | -------------------------------------------------------------------------------------------------------------------------------------------- |
| AiTM            | Adversary-in-the-middle: a phishing kit that relays the real session to steal cookies and bypass MFA.                                        |
| ENS             | Esquema Nacional de Seguridad (Spain's National Security Framework). Ironchip's product is listed in the CCN-CERT catalog at the HIGH level. |
| FIDO2 / passkey | A cryptographic credential bound to the device that is never sent to the server.                                                             |
| IdP             | Identity provider: the service that authenticates the user and issues the token (OIDC) or the assertion (SAML).                              |
| ITDR            | Identity Threat Detection and Response: detection of and response to compromised identities.                                                 |
| JIT             | Just-in-Time: privileged access granted only for the duration of the approved session.                                                       |
| OIDC            | OpenID Connect, an identity protocol on top of OAuth 2.0.                                                                                    |
| PAM             | Privileged Access Management.                                                                                                                |
| RADIUS          | A network authentication protocol used by VPNs, corporate Wi-Fi and network equipment.                                                       |
| SAML            | Security Assertion Markup Language, an identity federation protocol.                                                                         |
| SCIM            | A protocol for provisioning users and groups between systems.                                                                                |
| SIM swapping    | Fraudulent duplication of a SIM card to receive the victim's codes.                                                                          |