Overig · Overig
What is Authentication?
Authentication is the process by which a system verifies whether someone truly is who they claim to be. Without authentication, anyone could log into any account — making it the first line of defense in Identity & Access Management.
Marcel van Beek · CTO · 2 min read
Authentication is the process by which a system verifies whether someone truly is who they claim to be. Without authentication, anyone could log in to any account — making it the first line of defence in Identity & Access Management.
The most well-known form of authentication is using a username and password. That seems simple, but in modern organisations it is often more complex: employees use dozens of applications, each with its own login methods. IAM platforms like Joinly ensure that authentication is centrally managed.
Authentication can occur via different standards: SAML, OAuth, and OpenID Connect. These protocols dictate how identity is exchanged between systems. This allows someone to safely log into services like Microsoft 365, without every system needing to know the password.
Strong authentication goes beyond just passwords. Multi-Factor Authentication (MFA) adds a second proof, such as an SMS code or app notification. This significantly reduces the risk of misuse of stolen login credentials.
Thus, authentication forms the foundation for every secure digital environment. Without reliable authentication, there can be no reliable authorisation.
In short: Authentication determines who you are and forms the foundation of all access.
Explore more blogs
Segregation of Duties (SoD): wat het is en hoe je het afdwingt
Wat is segregation of duties (functiescheiding)? Uitleg, voorbeelden en waarom het vaak misgaat. Plus hoe je SoD-conflicten automatisch tegenhoudt.
Marcel van Beek · 4 min read
How do you apply AGDLP in a hybrid Entra/AD environment? (And why you shouldn't want to anymore)
Short answer: preferably not. AGDLP (Accounts → Global groups → Domain Local groups → Permissions) is a concept from the era of manual management. The entire nesting construction exists for one reason: to allow a human to assign permissions with as few mouse clicks as possible. As soon as an agent assigns group memberships directly based on HR data, this reason disappears and only the complexity remains. Moreover, in a hybrid environment, this complexity actively works against you, because Entra ID completely ignores nesting for licences and app assignment. In this article, you can read how AGDLP works and why it was once smart, where it breaks down in a hybrid environment, and what the modern alternative looks like: direct memberships, managed by automation.
Marcel van Beek · 5 min read
How do I set up role-based access control (RBAC) and least privilege for a municipality?
Start with the roles in your HR system and map them to roles, not to individual permissions per person. Group each role with precisely the access required for the job, adhering to the principle of least privilege. Manage these roles centrally and let an orchestration layer automatically assign and revoke them. This keeps access predictable, limited and demonstrable.
Mike Fraanje · 4 min read
See what Joinly can do for your organisation?
Start a free trial today or get in touch for advice on your HR and Microsoft environment.