Identity Attack Vectors: Strategically Designing and Implementing Identity Security, Second Edition

© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2024

M. J. Haber, D. RollsIdentity Attack Vectorshttps://doi.org/10.1007/979-8-8688-0233-1_18

18. Just-in-Time Access Management

Morey J. Haber¹   and Darran Rolls²

(1)

ORLANDO, FL, USA

(2)

AUSTIN, TX, USA

 

The concept of just-in-time (JIT) access management is a strategy that aligns real-time requests for usage of accounts directly with entitlements, workflows, and appropriate access policies. Companies use this strategy to secure accounts from continuous real-time access (known as standing privileges) by restricting them based on appropriate behavior, context, and other ephemeral properties. This decreases the risk of an always-on account that can be leveraged by ...