Identity and access management (IAM) refers to the people, processes and technology used to create, manage, authenticate, control and remove the permissions a user (internal, external or customer) has when working with an organization’s technology resources. IAM helps manage user interactions and decrease the chances of a cyber incident launched through abused credentials. Common components of an IAM program include single sign on (SSO), access management and user authentication.