VERISCO Shield Reference
Glossary
The terms used across this documentation, in alphabetical order.
- Access Map
- A page of your console that draws devices, people, networks and your application as one graph.
- Active user
- Someone who signed in at least once in a calendar month. The unit your plan counts.
- Analyzer key
- The secret the CLI uses to act for your tenant. Shown on your integration page.
- Assertion
- The signed statement of who the user is, issued after sign-in. A JSON Web Token signed with RS256.
- Challenge
- A decision that asks for a second factor before letting a sign-in continue. Also called step-up.
- Claims
- The fields inside the assertion: the user's id, email and roles, and when it was issued and expires.
- Connector
- An agent in your network that dials out to VERISCO and tunnels your application, and optionally your database, back.
- Coverage
- A page that reports state instead of events: who signs in without a second factor, which accounts are dormant, which devices keep failing.
- Decision
- The outcome of evaluating policy for one sign-in: allow, challenge or deny.
- Deployment mode
- How VERISCO reaches your application: gateway, connector or SDK.
- Enforcement feed
- The endpoint an SDK-mode application polls to learn what to enforce.
- Gateway
- The reverse proxy in front of your application in gateway and connector mode.
- Identity source
- Where your users are read from: your MySQL database or your LDAP directory.
- Pass-through
- The state of a published tenant before it goes live. Traffic flows through VERISCO and nobody is blocked.
- Passkey
- A phishing-resistant credential held by a device or a security key and unlocked with a fingerprint, a face or a PIN.
- Posture
- The security state of a device: its operating system version, disk encryption, firewall and screen lock.
- Pseudonymous view
- A display setting that shows people by a stable pseudonym instead of their name.
- Realm
- Your tenant's isolated authentication domain.
- Revocation
- Ending a session, or all of a person's sessions. A not-before time: the person can sign in again.
- Sealed path
- A path of your application that returns 404 from outside. Used for an old login page.
- Session binding
- Comparing each request of a session with the network and browser it started on.
- Tenant
- One application protected by Shield, with its own configuration, keys and records.
- TOTP
- Time-based one-time password. The six-digit code an authenticator app shows.
- Watch mode
- A policy mode in which every decision is evaluated and recorded and nobody is stopped.
- Watchlist
- People whose alert thresholds are halved for a period you set.
Something missing or wrong on this page? Tell us and we will fix it.