# Glossary

## Term of the day

[Learn more about Windows Hello](/content/glossary/windows-hello/index.html)

### Most popular terms

- [Discoverable Credential](/content/glossary/discoverable-credential/index.html)
- [AGDIS (Australian Government Digital ID System)](/content/glossary/agdis/index.html)
- [JSON-LD](/content/glossary/json-ld/index.html)
- [Trust Service Provider (TSP)](/content/glossary/tsp/index.html)
- [DIRA (Digital Identity Risk Assessment)](/content/glossary/dira/index.html)

---

3

[**3-D Secure**](/content/glossary/3d-secure/index.html)

A  
[**AAGUID (Authenticator Attestation Global Unique Identifier)**](/content/glossary/aaguid/index.html)  
[**Access Control Server (ACS)**](/content/glossary/acs/index.html)  
[**Access Token**](/content/glossary/access-token/index.html)  
[**Account Takeover (ATO)**](/content/glossary/account-takeover/index.html)  
[**Acquirer**](/content/glossary/acquirer/index.html)  
[**Adaptive MFA**](/content/glossary/adaptive-mfa/index.html)  
[**AGDIS (Australian Government Digital ID System)**](/content/glossary/agdis/index.html)  
[**allowCredentials**](/content/glossary/allowcredentials/index.html)  
[**Assertion**](/content/glossary/assertion/index.html)  
[**Attestation**](/content/glossary/attestation/index.html)  
[**Authentication Assurance Level (AAL)**](/content/glossary/authentication-assurance-level/index.html)  
[**Authenticator**](/content/glossary/authenticator/index.html)  
[**Authenticator App**](/content/glossary/authenticator-app/index.html)  
[**authenticatorSelection**](/content/glossary/authenticatorselection/index.html)

B  
[**Biometric Authentication**](/content/glossary/biometric-authentication/index.html)  
[**Botnet**](/content/glossary/botnet/index.html)  
[**Brute Force Attack**](/content/glossary/brute-force-attack/index.html)

C  
[**Card Access Number (CAN)**](/content/glossary/card-access-number/index.html)  
[**Card Not Present (CNP)**](/content/glossary/cnp/index.html)  
[**CBOR**](/content/glossary/cbor/index.html)  
[**CDA (Cross-Device Authentication)**](/content/glossary/cda/index.html)  
[**Certificate-Based Authentication (CBA)**](/content/glossary/certificate-based-authentication/index.html)  
[**Chrome on Mac**](/content/glossary/chrome-on-mac/index.html)  
[**CISO**](/content/glossary/ciso/index.html)  
[**clientDataJSON**](/content/glossary/clientdatajson/index.html)  
[**Conditional UI**](/content/glossary/conditional-ui/index.html)  
[**Confidential and Public Applications**](/content/glossary/confidential-public-applications/index.html)  
[**Credential Stuffing**](/content/glossary/credential-stuffing/index.html)  
[**Credential-on-File (COF) Token**](/content/glossary/cof-token/index.html)  
[**Critical Infrastructure**](/content/glossary/critical-infrastructure/index.html)  
[**Cross-Platform Authenticator**](/content/glossary/cross-platform-authenticator/index.html)  
[**Cryptographic Challenge**](/content/glossary/cryptographic-challenge/index.html)  
[**CTAP (Client-to-Authenticator-Protocol)**](/content/glossary/ctap/index.html)  
[**Cyber Attack**](/content/glossary/cyber-attack/index.html)  
[**Cyber Threat**](/content/glossary/cyber-threat/index.html)

D  
[**Data Breach**](/content/glossary/data-breach/index.html)  
[**Decentralized Identifier (DID)**](/content/glossary/decentralized-identifier/index.html)  
[**Delegated Authentication**](/content/glossary/delegated-authentication/index.html)  
[**Digital Badge**](/content/glossary/digital-badge/index.html)  
[**DIRA (Digital Identity Risk Assessment)**](/content/glossary/dira/index.html)  
[**Discoverable Credential**](/content/glossary/discoverable-credential/index.html)  
[**DNS Spoofing**](/content/glossary/dns-spoofing/index.html)

E  
[**eIDAS**](/content/glossary/eidas/index.html)  
[**excludeCredentials**](/content/glossary/excludecredentials/index.html)  
[**Exploit**](/content/glossary/exploit/index.html)  
[**External Authenticator**](/content/glossary/external-authenticator/index.html)

F  
[**FAL (Federation Assurance Level)**](/content/glossary/fal/index.html)  
[**FIDO Alliance**](/content/glossary/fido-alliance/index.html)  
[**FIDO2**](/content/glossary/fido2/index.html)  
[**FIPS 140-2**](/content/glossary/fips-140-2/index.html)

G  
[**GDPR (General Data Protection Regulation)**](/content/glossary/gdpr/index.html)  
[**Google Password Manager**](/content/glossary/google-password-manager/index.html)

H  
[**HMAC-Secret**](/content/glossary/hmac-secret/index.html)  
[**HSM (Hardware Security Module)**](/content/glossary/hardware-security-module/index.html)

I  
[**IAL (Identity Assurance Level)**](/content/glossary/ial/index.html)  
[**IAM (Identity Access Management)**](/content/glossary/identity-access-management/index.html)  
[**iCloud Keychain**](/content/glossary/icloud-keychain/index.html)  
[**Identity Proofing (IP)**](/content/glossary/identity-proofing/index.html)  
[**IP Spoofing**](/content/glossary/ip-spoofing/index.html)  
[**ISO 18013-5 NFC, BLE, QR**](/content/glossary/iso-18013-5/index.html)  
[**ISO 18013-7 Remote Presentation**](/content/glossary/iso-18013-7/index.html)  
[**Issuer**](/content/glossary/issuer/index.html)

J  
[**JSON-LD**](/content/glossary/json-ld/index.html)  
[**JWKS (JSON Web Key Sets)**](/content/glossary/jwks/index.html)  
[**JWT (JSON Web Token)**](/content/glossary/jwt/index.html)

K  
[**Kerberos**](/content/glossary/kerberos/index.html)

M  
[**Machine-to-machine (M2M) Authentication**](/content/glossary/m2m-authentication/index.html)  
[**Malware**](/content/glossary/malware/index.html)  
[**Man-in-the-Middle (MitM) Attack**](/content/glossary/man-in-the-middle-attack/index.html)  
[**mDoc**](/content/glossary/mdoc/index.html)  
[**Merchant**](/content/glossary/merchant/index.html)  
[**MFA (Multi-Factor Authentication)**](/content/glossary/mfa/index.html)  
[**Microcredentials**](/content/glossary/microcredentials/index.html)

N  
[**Network Tokenisation**](/content/glossary/network-tokenisation/index.html)  
[**Non-Resident Keys (NRK)**](/content/glossary/non-resident-keys/index.html)

O  
[**OAuth 2.0**](/content/glossary/oauth2/index.html)  
[**OIDC (OpenID Connect)**](/content/glossary/oidc/index.html)  
[**OpenID for Verifiable Credentials (OpenID4VC)**](/content/glossary/open-id-4-vc/index.html)  
[**OpenID for Verifiable Presentations (OpenID4VP)**](/content/glossary/open-id-4-vp/index.html)  
[**OpenID4VCI**](/content/glossary/openid4vci/index.html)  
[**OTP (One-Time Password)**](/content/glossary/otp/index.html)

P  
[**PAM (Privileged Access Management)**](/content/glossary/privileged-access-management/index.html)  
[**Passkey**](/content/glossary/passkey/index.html)  
[**Password Authenticated Connection Establishment (PACE)**](/content/glossary/pace/index.html)  
[**Password Hashing**](/content/glossary/password-hashing/index.html)  
[**Password Salting**](/content/glossary/password-salting/index.html)  
[**Passwordless Authentication**](/content/glossary/passwordless-authentication/index.html)  
[**Personal Identification Data (PID)**](/content/glossary/personal-identification/index.html)  
[**Phishing**](/content/glossary/phishing/index.html)  
[**Phishing-Resistant MFA**](/content/glossary/phishing-resistant-mfa/index.html)  
[**Platform Authenticator**](/content/glossary/platform-authenticator/index.html)  
[**Primary Account Number (PAN)**](/content/glossary/pan/index.html)  
[**Public Key Cryptography**](/content/glossary/public-key-cryptography/index.html)  
[**PublicKeyCredentialCreationOptions**](/content/glossary/publickeycredentialcreationoptions/index.html)  
[**PublicKeyCredentialRequestOptions**](/content/glossary/publickeycredentialrequestoptions/index.html)

Q  
[**Qualified Certificate (QC)**](/content/glossary/qualified-certificate/index.html)  
[**Qualified Electronic Attestations of Attributes (QEAA)**](/content/glossary/qualified-electronic-attestations/index.html)  
[**Qualified Electronic Signature (QES)**](/content/glossary/qualified-electronic-signature/index.html)  
[**Qualified Trust Service Provider (QTSP)**](/content/glossary/qtsp/index.html)

R  
[**Ransomware**](/content/glossary/ransomware/index.html)  
[**Relying Party**](/content/glossary/relying-party/index.html)  
[**Resident Key**](/content/glossary/resident-key/index.html)  
[**Role-Based Access Control (RBAC)**](/content/glossary/role-based-access-control/index.html)  
[**Root of Trust (RoT)**](/content/glossary/root-of-trust/index.html)

S  
[**SAML (Security Assertion Markup Language)**](/content/glossary/saml/index.html)  
[**Secure Enclave**](/content/glossary/secure-enclave/index.html)  
[**Secure Remote Commerce 2.0 (SRC 2.0)**](/content/glossary/src/index.html)  
[**Security Key**](/content/glossary/security-key/index.html)  
[**Selective Disclosure ( SD-JWT)**](/content/glossary/selective-disclosure/index.html)  
[**SIM Swap**](/content/glossary/sim-swap/index.html)  
[**Smart Card**](/content/glossary/smart-card/index.html)  
[**Social Login**](/content/glossary/social-login/index.html)  
[**Spear Phishing**](/content/glossary/spear-phishing/index.html)  
[**SSO (Single-Sign-On)**](/content/glossary/single-sign-on-sso/index.html)  
[**Step-Up Authentication**](/content/glossary/step-up-authentication/index.html)

T  
[**TDIF (Trusted Digital Identity Framework)**](/content/glossary/tdif/index.html)  
[**TPM (Trusted Platform Model)**](/content/glossary/trusted-platform-module/index.html)  
[**Trust Framework**](/content/glossary/trust-framework/index.html)  
[**Trust Service Provider (TSP)**](/content/glossary/tsp/index.html)

U  
[**U2F (Universal 2nd Factor)**](/content/glossary/u2f/index.html)  
[**User Presence**](/content/glossary/user-presence/index.html)  
[**User Verification**](/content/glossary/user-verification/index.html)

V  
[**Verifiable Credential (VC)**](/content/glossary/verifiable-credential/index.html)  
[**Verifiable Presentation**](/content/glossary/verifiable-presentation/index.html)  
[**Vishing**](/content/glossary/vishing/index.html)  
[**Vulnerability**](/content/glossary/vulnerability/index.html)

W  
[**W3C (World Wide Web Consortium)**](/content/glossary/w3c/index.html)  
[**WebAuthn**](/content/glossary/webauthn/index.html)  
[**Windows Hello**](/content/glossary/windows-hello/index.html)

Y  
[**YubiKey**](/content/glossary/yubikey/index.html)

Z  
[**Zero Trust**](/content/glossary/zero-trust/index.html)

## Add authentication observability to your rollout

See every login journey clearly, diagnose failures faster and keep your existing IDP in place.

- Works with your existing stack
- Diagnose failures faster
- Prove adoption and impact

[Explore the Console](https://app.corbado.com/#signup-init)  
[Book a Demo](/content/contact/index.html)