{"id":2497,"date":"2018-03-29T10:40:58","date_gmt":"2018-03-29T14:40:58","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=2497"},"modified":"2018-03-29T10:42:18","modified_gmt":"2018-03-29T14:42:18","slug":"key-ciam-findings-ubisecure-blog-q1-2018","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/","title":{"rendered":"Key CIAM Findings from the Ubisecure Blog Q1 2018"},"content":{"rendered":"

\"2018<\/p>\n

Identity and access management (IAM) solution providers do more than simply provide a product. They are on the front lines of cybersecurity research, innovating new ways to store and secure identity data, and fighting back against hackers and insider threats. They know the identity industry trends and threats better than anyone.<\/span><\/p>\n

\t\t\t

\"IAM<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

Therefore, we make a point to read through <\/span>IAM<\/span><\/a> vendors\u2019<\/span><\/a> blogs<\/span><\/a> and pulling out what key best practices we can learn from them. This time we read through the blog of <\/span>Ubisecure<\/span><\/a>: a Finnish Customer Identity and Access Management (CIAM) solution provider. Here\u2019s what we gleaned from their blogs posts in Q1 2018: <\/span><\/p>\n

What is Consent Receipt? By Oscar Santolalla<\/b><\/a><\/span><\/h3>\n

We all know how things run nowadays. Customers can\u2019t make purchases or use services without giving the enterprises at least some personal data. But now so many companies are demanding so much information, customers have begun forgetting who has their data or where it is stored. <\/span><\/p>\n

Ubisecure observes that while enterprises do need to ask consent before collecting, storing, and using users\u2019 identity data, the process of asking for users\u2019 consent is incredibly problematic. Users generally don\u2019t understand what they\u2019re consenting to, and services or products might be denied if the user doesn\u2019t consent to everything the enterprise demands\u2014an unfair all-or-nothing game that does not foster trust.<\/span><\/p>\n

More technically, these consent demands don\u2019t give customers a record of what personal data they give out to whom and for what purposes. On this front, Ubisecure suggests enterprises issue consent receipts to give users a clear record of what personal information they gave and how it will be used. This should help foster customer trust, which is essential to encouraging repeat customers. \u00a0<\/span><\/p>\n

Common Sense Privacy by Petteri Ihalainen <\/b><\/a><\/span><\/h3>\n

This article actually begins with a more philosophical take on privacy: how it relates to our public actions and why we value it\u2014and moreover, how individual privacy concerns can be. Some services and products can be so private and personal that even being publically associated with it can be a violation of privacy to some users. <\/span><\/p>\n

While Ubisecure\u2019s article is of more help to the individual employee than the enterprise, your employees\u2019 behaviors can radically determine your data security. Instructing you employees on identity best practices is vital to preserving your own networks\u2014especially if those employees have purchasing power of any sort. With that in mind, the key finding in this post is acting on a zero-trust model in day-to-day online life. If it is a service you are not familiar with, do not give them your personal identity data. Look up an alternative service or product if possible. If that is not possible, look for certifications that the site in question treats their user data properly. <\/span><\/p>\n

Cyber Security vs User Experience By Minttu Junikka <\/b><\/a><\/span><\/h3>\n

Cybersecurity is the opposite of user experience. Or at least that is the common perception Ubisecure confronts in this blog post. More specifically, the problem is that a good user experience can make or break a customer-facing enterprise. User interface and user experience improvements can increase conversion rates by anywhere between 200% and 400%\u2014far too much for any enterprise to turn down. So they tend to let cybersecurity procedures slip. <\/span><\/p>\n

Yet Ubisecure isn\u2019t convinced that there needs to be a divide between user experience and cybersecurity. In their opinion, a CIAM solution can bridge the gap between the two via the implementation of a balanced security policy with a multitude of authentication options. This allows for a level of customization so you can fit your authentication methods with your customer bases\u2019 needs rather than harassing them and driving away business.<\/span><\/p>\n

Single Sign-On vs Step-up Authentication by Petteri Ihalainen <\/b><\/a><\/span><\/h3>\n

Ubisecure notes that single sign-on and step-up authentication are two equally valid authentication tools with two different focuses. Both can be essential for users navigating your applications. They call it the difference between the two methods lateral and vertical movement, respectively. <\/span><\/p>\n

Single sign-on stores a user\u2019s session identity authentication information on the browser or via the identity provider, telling other applications that this user is already authenticated. An identity provider can manage session creation, token insurance (if tokens are utilized as an authentication factor), and verification transparency to facilitate ease of movement through enterprise applications. \u00a0\u00a0<\/span><\/p>\n

Meanwhile, step-up authentication applies when the user needs to access more confidential information after they entered minimal identity authentication factors; to pass through a more secure area, the user needs to offer more secure authentication methods. After all, social media credentials login shouldn\u2019t allow a user to access financial records. Instead, they should be asked for a hard token or biometric authentication to verify their identity before stepping up to that security level. <\/span><\/p>\n

In other words, Ubisecure states that single sign-on is about convenience for low-level applications while step-up is more concerned with securing sensitive data. You can implement both to balance user experiences and identity data security.<\/span><\/p>\n
Widget not in any sidebars
\n","protected":false},"excerpt":{"rendered":"

Identity and access management (IAM) solution providers do more than simply provide a product. They are on the front lines of cybersecurity research, innovating new ways to store and secure identity data, and fighting back against hackers and insider threats. They know the identity industry trends and threats better than anyone. Therefore, we make a […]<\/p>\n","protected":false},"author":41,"featured_media":2372,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[142,125,153,461,639],"acf":[],"yoast_head":"\nKey CIAM Findings from the Ubisecure Blog Q1 2018<\/title>\n<meta name=\"description\" content=\"This time we read through the blog of Ubisecure: a Finnish Customer Identity and Access Management (CIAM) solution provider.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/\",\"name\":\"Key CIAM Findings from the Ubisecure Blog Q1 2018\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/ubisecure-logo-blog-mod.png\",\"datePublished\":\"2018-03-29T14:40:58+00:00\",\"dateModified\":\"2018-03-29T14:42:18+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"This time we read through the blog of Ubisecure: a Finnish Customer Identity and Access Management (CIAM) solution provider.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/ubisecure-logo-blog-mod.png\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/ubisecure-logo-blog-mod.png\",\"width\":800,\"height\":400,\"caption\":\"IAMwithUBI London 2018\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Key CIAM Findings from the Ubisecure Blog Q1 2018\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Key CIAM Findings from the Ubisecure Blog Q1 2018","description":"This time we read through the blog of Ubisecure: a Finnish Customer Identity and Access Management (CIAM) solution provider.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/","url":"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/","name":"Key CIAM Findings from the Ubisecure Blog Q1 2018","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/ubisecure-logo-blog-mod.png","datePublished":"2018-03-29T14:40:58+00:00","dateModified":"2018-03-29T14:42:18+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"This time we read through the blog of Ubisecure: a Finnish Customer Identity and Access Management (CIAM) solution provider.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/ubisecure-logo-blog-mod.png","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/ubisecure-logo-blog-mod.png","width":800,"height":400,"caption":"IAMwithUBI London 2018"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/key-ciam-findings-ubisecure-blog-q1-2018\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Key CIAM Findings from the Ubisecure Blog Q1 2018"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/2497"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=2497"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/2497\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/2372"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=2497"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=2497"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=2497"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}