Glossary

Short definitions of the technical terms used in the documentation. Ironchip’s own concepts are explained in more detail in Key concepts.

Term	Meaning
AiTM	Adversary-in-the-middle: a phishing kit that relays the real session to steal cookies and bypass MFA.
ENS	Esquema Nacional de Seguridad (Spain’s National Security Framework). Ironchip’s product is listed in the CCN-CERT catalog at the HIGH level.
FIDO2 / passkey	A cryptographic credential bound to the device that is never sent to the server.
IdP	Identity provider: the service that authenticates the user and issues the token (OIDC) or the assertion (SAML).
ITDR	Identity Threat Detection and Response: detection of and response to compromised identities.
JIT	Just-in-Time: privileged access granted only for the duration of the approved session.
OIDC	OpenID Connect, an identity protocol on top of OAuth 2.0.
PAM	Privileged Access Management.
RADIUS	A network authentication protocol used by VPNs, corporate Wi-Fi and network equipment.
SAML	Security Assertion Markup Language, an identity federation protocol.
SCIM	A protocol for provisioning users and groups between systems.
SIM swapping	Fraudulent duplication of a SIM card to receive the victim’s codes.