Glossary

A zero-trust architecture that treats identity as the primary control point, making strong authentication and continuous, context-aware authorization of identities the foundation of access decisions rather than network location.

Identity-centric zero trust puts identity at the heart of access: every request is authenticated and authorized based on the verified identity (and its context, device, and risk), regardless of network position, with continuous re-evaluation. Because identity is the modern perimeter, this approach uses strong authentication, least-privilege authorization, and continuous access evaluation as the core enforcement, distinguishing it from network-centric models. It is a leading way organizations operationalize zero trust.

Introduced in: Zero Trust Architecture

No related terms linked yet.