{"id":1220,"date":"2017-10-11T09:44:39","date_gmt":"2017-10-11T13:44:39","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=1220"},"modified":"2018-04-23T16:21:14","modified_gmt":"2018-04-23T20:21:14","slug":"choosing-multifactor-authentication-solutions-5-tips","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/","title":{"rendered":"5 Essential Tips For Choosing Multifactor Authentication (MFA) Solutions"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1221\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Identity-mfa-devices.jpg\" alt=\"Identity-mfa-devices\" width=\"800\" height=\"350\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Identity-mfa-devices.jpg 800w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Identity-mfa-devices-300x131.jpg 300w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Identity-mfa-devices-768x336.jpg 768w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Identity-mfa-devices-600x263.jpg 600w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Identity-mfa-devices-180x79.jpg 180w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Identity-mfa-devices-400x175.jpg 400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<div id=\"pic-content-div\"><\/div>\n<p style=\"text-align: justify\">In 2016, usernames and passwords are as much a part of your identity as your driver\u2019s license. social security number, and birth certificate.<\/p>\n<div class=\"widget\"><div class=\"aside-card\">\t\t\t<div class=\"textwidget\"><p><a class=\"iam-inject\" href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-privilieged-access-management-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1682\" title=\"\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2020\/01\/PAM_BG_SB_800.gif\" alt=\"Download Link to Privileged Access Management Buyer's Guide\" width=\"800\" height=\"100\" \/><\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n<p style=\"text-align: justify\">You\u2019re asked for them every day and you\u2019ve probably got several combinations, maybe even dozens. For decades, the password has been the de facto standard for digital authentication, but as it turns out, passwords aren\u2019t very secure at all.<\/p>\n<p style=\"text-align: justify\">But the problems with passwords are well-known\u2014even the most complex passwords may be as useless as <a href=\"https:\/\/solutionsreview.com\/identity-management\/the-worst-passwords-of-2015-are-just-as-terrible-as-you-thought\/\" target=\"_blank\" rel=\"noopener noreferrer\">using \u201cpassword\u201d as your password<\/a>, according to some <a href=\"https:\/\/solutionsreview.com\/identity-management\/your-complex-password-isnt-much-safer-than-12345\/dards.\" target=\"_blank\" rel=\"noopener noreferrer\">recent reports.<\/a>\u00a0On top of that, passwords can be sold and exchanged easily, which makes them a massive liability for large organizations.\u00a0<a href=\"https:\/\/solutionsreview.com\/identity-management\/sailpoint-survey-your-employees-will-sell-their-passwords-for-only-150\/\" target=\"_blank\" rel=\"noopener noreferrer\">Research has shown<\/a> that employees could sell their passwords for as little as $150\u2014pocket change compared to the average cost of a data breach. So when the traditional means of authentication are clearly flawed, what&#8217;s the next step?<\/p>\n<hr \/>\n<div class=\"box box0\"><p><strong><a href=\"https:\/\/solutionsreview.com\/identity-management\/mfa-best-practices-ping-identity\/\"><img loading=\"lazy\" decoding=\"async\" class=\"alignright size-thumbnail wp-image-1233\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Ping-whitepaper-thumb-1-150x150.png\" alt=\"Ping-whitepaper-thumb\" width=\"150\" height=\"150\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Ping-whitepaper-thumb-1-150x150.png 150w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Ping-whitepaper-thumb-1-60x60.png 60w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Ping-whitepaper-thumb-1-81x81.png 81w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Ping-whitepaper-thumb-1-180x180.png 180w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Ping-whitepaper-thumb-1.png 200w\" sizes=\"(max-width: 150px) 100vw, 150px\" \/><\/a>Multi-factor Authentication\u00a0Best Practices for Securing the Modern Digital Enterprise<\/strong><\/p>\n<p>In this white paper, you\u2019ll learn about:<\/p>\n<ul>\n<li>\u00a0Authentication in depth, including its vocabulary, mechanisms, and signals.<\/li>\n<li>\u00a0Choosing the right MFA mechanisms for your environment.<\/li>\n<li>\u00a0Applying a risk-based model to step-up MFA.<\/li>\n<li>\u00a0Best practices in step-up MFA, including risk analysis, choice of authentication factors, privacy, lock-out, registration, user opt-in, suspension and bypass, self-service, native applications, initial authentication and multiple touch points\/channels.<\/li>\n<\/ul>\n<p style=\"text-align: center\"><a href=\"https:\/\/solutionsreview.com\/identity-management\/mfa-best-practices-ping-identity\/\" class=\"ss-button default\" target=\"_blank\">Download<\/a><\/p><\/div>\n<hr \/>\n<p style=\"text-align: justify\">Generally, the best practices is to step-up your security with step-up Multifactor Authentication (MFA).<\/p>\n<p style=\"text-align: justify\">Multifactor Authentication, or MFA, adds an additional step (or factor) to the authentication process, typically by pairing something the user knows, such as username and password, with an action, or something the user has, such as an SMS message to their phone, an email, or a token.<\/p>\n<p style=\"text-align: justify\">Most of us have some experience with this. For example: say you want to transfer money from your bank account online. Instead of simply requiring a password, your bank \u00a0probably sends an SMS to your phone to establish the required additional assurance.<\/p>\n<p style=\"text-align: justify\">MFA quickly becoming a commonplace,essential part of the information security toolkit. In fact, it&#8217;s often required in order to meet compliance requirements, depending on your business. But choosing the right solution and vendor for you is a complicated process\u2014one that requires in-depth research and often comes down to more than just the solutions and its technical capabilities.<\/p>\n<p style=\"text-align: justify\">So how do you choose the right step-up MFA mechanism for your environment?<\/p>\n<p style=\"text-align: justify\">For starters, consider these 5 variables, courtesy of Ping Identity&#8217;s new whitepaper\u00a0<em>Multi-factor Authentication Best Practices for Securing the Modern Digital Enterprise,<\/em> when making your choice:<\/p>\n<ol style=\"text-align: justify\">\n<li><strong>Does it support flexible, risk-based step-up authentication?<\/strong> Applying only the necessary amount of security depending upon the associated risk allows you to provide an optimal user experience, while controlling costs, improving fraud detection and creating an architecture that can flex to future demands.<\/li>\n<li><strong>Can it be extended with passive contextual authentication?<\/strong> Utilizing passive user information\u2014like geolocation, IP address, time of day and device identifiers\u2014is the wave of the future. It provides better security and a better user experience, making it particularly suited to consumers.<\/li>\n<li><strong>How easy is it for your customers to use?<\/strong> Providing a positive customer experience is key. Consider the limitations that your users may have, from non-smart phones to disabilities, as well as their potential resistance to new or invasive technologies.<\/li>\n<li><strong>How can you mitigate the risk of opt-outs?<\/strong> Having a choice of authentication methods\u2014like voice, SMS and email\u2014can mean the difference between adoption and abandonment. Anticipating objections is another important step in increasing adoption. Planning to maximize usability and flexibility will yield the best outcomes.<\/li>\n<li><strong>How easy is it for your employees to use?<\/strong> Employees can no longer be expected to go along with a less-than-optimal user experience, or one that is overly obtrusive. For customers and employees alike, be sure to balance usability with cost and security to increase adoption.<\/li>\n<\/ol>\n<br \/>Widget not in any sidebars<br \/>\n<p style=\"text-align: justify\">Those five questions provide a solid foundation for the solutions assessment process, but to learn more about MFA, I strongly suggest checking out the\u00a0<em>Multi-factor Authentication Best Practices for Securing the Modern Digital Enterprise<\/em> white paper from Ping Identity.<\/p>\n<p style=\"text-align: justify\">This straightforward white paper proposes best practices for customer and enterprise deployments of step-up multi-factor authentication (MFA), without getting too jargony and convoluted.<\/p>\n<div class=\"widget\"><div class=\"aside-card\">\t\t\t<div class=\"textwidget\"><p><a class=\"iam-inject\" href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-privilieged-access-management-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1682\" title=\"\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2020\/01\/PAM_BG_SB_800.gif\" alt=\"Download Link to Privileged Access Management Buyer's Guide\" width=\"800\" height=\"100\" \/><\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n<h3>And watch this for the 10 Best Resources for Evaluating IAM solutions:<\/h3>\n<p><iframe loading=\"lazy\" title=\"Top 10 Resources for Evaluating Identity Management Tools\" width=\"500\" height=\"281\" src=\"https:\/\/www.youtube.com\/embed\/LB6Yk2wh81E?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" allowfullscreen><\/iframe><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In 2016, usernames and passwords are as much a part of your identity as your driver\u2019s license. social security number, and birth certificate. You\u2019re asked for them every day and you\u2019ve probably got several combinations, maybe even dozens. For decades, the password has been the de facto standard for digital authentication, but as it turns [&hellip;]<\/p>\n","protected":false},"author":24,"featured_media":1221,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[125,18,145,364,63],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>5 Essential Tips For Choosing Multifactor Authentication (MFA) Solutions<\/title>\n<meta name=\"description\" content=\"So when the traditional means of authentication are clearly flawed, what&#039;s the next step? It&#039;s Multifactor Authentication.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jeff Edwards\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/\",\"name\":\"5 Essential Tips For Choosing Multifactor Authentication (MFA) Solutions\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Identity-mfa-devices.jpg\",\"datePublished\":\"2017-10-11T13:44:39+00:00\",\"dateModified\":\"2018-04-23T20:21:14+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6\"},\"description\":\"So when the traditional means of authentication are clearly flawed, what's the next step? It's Multifactor Authentication.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Identity-mfa-devices.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Identity-mfa-devices.jpg\",\"width\":800,\"height\":350,\"caption\":\"The 4 Essential Mobile App Security Tips for Banks and Financial Institutions\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"5 Essential Tips For Choosing Multifactor Authentication (MFA) Solutions\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, &amp; Services\",\"description\":\"Identity Access Management (IAM) News, Best Practices and Buyer&#039;s Guide\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6\",\"name\":\"Jeff Edwards\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g\",\"caption\":\"Jeff Edwards\"},\"description\":\"Jeff Edwards is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in Journalism from the University of Massachusetts Amherst, and previously worked as a reporter covering Boston City Hall.\",\"sameAs\":[\"https:\/\/solutionsreview.com\",\"https:\/\/x.com\/InfoSec_Review\"],\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/jedwards\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"5 Essential Tips For Choosing Multifactor Authentication (MFA) Solutions","description":"So when the traditional means of authentication are clearly flawed, what's the next step? It's Multifactor Authentication.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/","twitter_misc":{"Written by":"Jeff Edwards","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/","url":"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/","name":"5 Essential Tips For Choosing Multifactor Authentication (MFA) Solutions","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Identity-mfa-devices.jpg","datePublished":"2017-10-11T13:44:39+00:00","dateModified":"2018-04-23T20:21:14+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6"},"description":"So when the traditional means of authentication are clearly flawed, what's the next step? It's Multifactor Authentication.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Identity-mfa-devices.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/07\/Identity-mfa-devices.jpg","width":800,"height":350,"caption":"The 4 Essential Mobile App Security Tips for Banks and Financial Institutions"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/choosing-multifactor-authentication-solutions-5-tips\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"5 Essential Tips For Choosing Multifactor Authentication (MFA) Solutions"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, &amp; Services","description":"Identity Access Management (IAM) News, Best Practices and Buyer&#039;s Guide","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6","name":"Jeff Edwards","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g","caption":"Jeff Edwards"},"description":"Jeff Edwards is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in Journalism from the University of Massachusetts Amherst, and previously worked as a reporter covering Boston City Hall.","sameAs":["https:\/\/solutionsreview.com","https:\/\/x.com\/InfoSec_Review"],"url":"https:\/\/solutionsreview.com\/identity-management\/author\/jedwards\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/1220"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/24"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=1220"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/1220\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/1221"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=1220"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=1220"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=1220"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}