One of the crucial areas in IT security is controlling access to computer systems to ensure that only authorized people should have access. For the CompTIA Security+ exam, we must be able to compare and contrast identity access management concepts such as identification, authorizing, and accounting with an AAA server. We also need to understand the different types of access, such as something you know, such as a password and pin; something you do, such as swiping a card; and something you have, such as a token. Creating authentication environments such as federation services are heavily tested.
The second area that is tested in the Security+ exam is all about installing and configuring identity services such as LDAP, Kerberos, TACACS+ not RACACS+, CHAP, PAP, MSCHAP not MMSCHAP, RADIUS, SAML, Open ID Connect, OAuth, secure, and NTLM...
