> For the complete documentation index, see [llms.txt](/docs/llms.txt)

# Identity Basics | FusionAuth Docs

Identity and access management is complex and can increase your risks if incomplete or wrong. Use this expert advice to help implement secure and efficient identity solutions for your applications.

# Identity Basics

![Identity Basics](/img/icons/identity-basics.svg)

[Optimizing Authorization Security: A Guide to Access Control ModelsExploring RBAC, ABAC, PBAC, and ReBAC as ways to model authorization in your system.](/articles/identity-basics/authorization-models)[How Complete Does Your Authentication Provider Need To Be?Learn the various types of authentication systems, advantages and limitations of each, and which ones might suit your application.](/articles/identity-basics/complete-authentication-system)[Performing Due Diligence On Authentication VendorsWhat kind of due diligence should you do when evaluating identity as a service vendors?](/articles/identity-basics/due-diligence-authentication-vendors)[Magic Links - A Guide to Passwordless AuthenticationMagic links offer secure, passwordless authentication, enhancing user experience and security. Learn more in and improve your access control today!](/articles/identity-basics/magic-links)[Multi-Tenant vs. Single-Tenant IDaaS SolutionsChoosing between multi-tenant and single-tenant IDaaS solutions comes down to an organization's business objectives and requirements. Which trade-offs are you willing to make?](/articles/identity-basics/multi-tenancy-vs-single-tenant-idaas-solutions)[Open Source vs. Commercial Auth ProvidersA look at the pros and cons of open-source and commercial authentication providers.](/articles/identity-basics/open-source-vs-commercial)[Why Outsource Your Auth System And How To Sell The Decision To Your CompanyWhy should you consider outsourcing your authentication, authorization and user management system, and how to get buy-in from your teammates.](/articles/identity-basics/outsource-auth-system-blueprint)[User-Centric Security - How Passkeys Improve User ExperienceWe discuss the history of passkeys, how developers use them, and how they improve the overall user experience (UX) of application login.](/articles/identity-basics/passkeys-ux)[Is Passwordless Authentication Ready for Regulatory Compliance?Passwordless authentication methods, like passkeys, are all the rage. Does passwordless have a home in highly-regulated industries such as banking, healthcare, and local government?](/articles/identity-basics/passwordless-regulatory-compliance)[Best Practices For Registration FormsUsers have to fill out registration forms to access applications. How can you make this as painless as possible?](/articles/identity-basics/registration-best-practices)[Slow Migration of User DataWhat is a slow migration and when does it make sense to perform one?](/articles/identity-basics/slow-migration)[The Value of Trying Your Auth Provider Before You CommitWhat are the benefits of trying an auth system provider before you integrate?](/articles/identity-basics/try-before-you-buy)[What Is Identity Proofing? - Identity Verification ExplainedLearn and how identity proofing helps verify a user's identity during onboarding. Understand common methods and its role in secure authentication systems.](/articles/identity-basics/what-is-identity-proofing)[What Is OpenID Connect (OIDC) and How It WorksExplore OpenID Connect (OIDC) and understand how it enhances authentication for web and mobile applications. Learn its workings, benefits, and more.](/articles/identity-basics/what-is-oidc)[What Is SCIM, The System For Cross-Domain Identity Management?What is SCIM, why would you use it, and how does it work?](/articles/identity-basics/what-is-scim)[What To Do When Your Auth System Vendor Gets AcquiredAuthentication is an integral part of your application, and as such the acquisition of your auth vendor isn't like other acquisitions.](/articles/identity-basics/what-to-do-when-auth-system-vendor-acquired)