{"id":3633,"date":"2018-10-26T13:04:50","date_gmt":"2018-10-26T17:04:50","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=3633"},"modified":"2018-11-08T11:48:15","modified_gmt":"2018-11-08T15:48:15","slug":"contextual-multifactor-authentication-ping-identity","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/","title":{"rendered":"Contextual Multifactor Authentication (With Ping Identity)"},"content":{"rendered":"

\"Contextual<\/p>\n

The disdain for passwords<\/a> is well-trodden ground on this site: employees and users frequently forget them, they\u2019re either easily cracked or easily stolen, and when used independently of other authentication factors they\u2019re remarkably weak. Yet there remains some confusion surrounding whether the issue is with passwords themselves or with single-factor authentication as a concept. If the entirety of your identity and access management protocols hinge on a single point of verification<\/a>, would anything you use truly stay secure? \u00a0<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

Enterprises and solution providers alike are therefore turning to two-factor authentication to provide a more layered approach to their identity management. This may involve incorporating hard tokens into the authentication processes or factoring in device recognition and geofencing as factors. But even this may not be enough. The way forward, according to some privileged access management solution providers, might be contextual multifactor authentication<\/a>. <\/span><\/p>\n

Theoretically, contextual multifactor authentication only differs from two-factor authentication by asking for more than two factors. Logically, so long as the factors are sufficiently distinct from one another, the compromise of one will not translate into data breaches or compromised accounts. Yet it is so much more than that\u00a0 \u00a0<\/span><\/p>\n

To understand contextual multifactor authentication in greater detail, we read through the \u201c<\/span>Multifactor Authentication: Best Practices for Securing the Modern Digital Enterprise<\/span><\/a>\u201d whitepaper by PAM vendor Ping Identity. <\/span><\/p>\n

Here\u2019s what we found: <\/span><\/p>\n

Contextual Multifactor Authentication Begins with Policy<\/b><\/h3>\n

Moreover, those contextual multifactor policies do not need to kick in immediately at the sign-on phase. They could trigger when the employee or privileged user is outside their normal geographic or temporal parameters for work, as just one example. Similarly, these policies could trigger when a user executes a sensitive task like a financial activity or when they make an account settings change. <\/span><\/p>\n

Moreover, these policies can also define safe areas or parameters in which the contextual multifactor protocols do not trigger i.e. the employee is in the office on an approved endpoint when making a setting change.<\/span><\/p>\n

Contextual Multifactor Can Improve your Bottom Line<\/b><\/h3>\n

Surprisingly, risk-based contextual multifactor can prove far more flexible than single-factor authentication in its digital architecture. It can thus more comfortably adapt to new technologies, resulting in less time dealing with integration issues in the future. <\/span><\/p>\n

In the short term, contextual multifactor authentication also limits the usage of the more elaborate high assurance mechanisms like fingerprint scans. This can reduce the cost-per-use of the more expensive tools in your access management arsenal, ultimately saving on your enterprise\u2019s security budget. \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\u00a0<\/b><\/p>\n

Hard Tokens Aren\u2019t Always the Solution<\/b><\/h3>\n

Even in a contextual multifactor authentication scheme, hard tokens can prove difficult to adopt. They can put a damper on user experience and can prove expensive.<\/span><\/p>\n

However, Ping Identity does describe a new form of hard token operating within the endpoint\u2019s USB slot. With the push of a button on this token, it sends a one-time passcode to a user\u2019s registered device. <\/span><\/p>\n

There are Myriad Authentication Factors To Select From<\/b><\/h3>\n

These can include passwords, hard tokens, soft tokens (which involve generating one-time passwords via mobile devices), biometric authentication, mobile authentication, and device identification. <\/span><\/p>\n

However what matter more than the factors you select (which is still quite important) is the risk assessment systems and models you establish to trigger contextual multifactor authentication. What situations, locations, user behaviors, or access requests will mandate more restrictive authentication demands? And how will you scale those authentication demands? <\/span><\/p>\n

You can download the full \u201c<\/span>Multifactor Authentication: Best Practices for Securing the Modern Digital Enterprise<\/span><\/a>\u201d whitepaper for free courtesy of Ping Identity to learn more about contextual multifactor, step-up multifactor, and authentication in general. \u00a0\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/p>\n","protected":false},"excerpt":{"rendered":"

The disdain for passwords is well-trodden ground on this site: employees and users frequently forget them, they\u2019re either easily cracked or easily stolen, and when used independently of other authentication factors they\u2019re remarkably weak. Yet there remains some confusion surrounding whether the issue is with passwords themselves or with single-factor authentication as a concept. If […]<\/p>\n","protected":false},"author":41,"featured_media":3375,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[142,125,237,16,112,76,70,145,124,91,123,63,90],"acf":[],"yoast_head":"\nContextual Multifactor Authentication (With Ping Identity)<\/title>\n<meta name=\"description\" content=\"The way forward, according to some privileged access management solution providers, might be contextual multifactor authentication.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/\",\"name\":\"Contextual Multifactor Authentication (With Ping Identity)\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/07\/privileged-access-management-MOD.jpg\",\"datePublished\":\"2018-10-26T17:04:50+00:00\",\"dateModified\":\"2018-11-08T15:48:15+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"The way forward, according to some privileged access management solution providers, might be contextual multifactor authentication.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/07\/privileged-access-management-MOD.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/07\/privileged-access-management-MOD.jpg\",\"width\":800,\"height\":425,\"caption\":\"Top-Tier Password Best Practices for World Password Day 2021\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Contextual Multifactor Authentication (With Ping Identity)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, & Services\",\"description\":\"Identity Access Management (IAM) News, Best Practices and Buyer's Guide\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Contextual Multifactor Authentication (With Ping Identity)","description":"The way forward, according to some privileged access management solution providers, might be contextual multifactor authentication.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/","url":"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/","name":"Contextual Multifactor Authentication (With Ping Identity)","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/07\/privileged-access-management-MOD.jpg","datePublished":"2018-10-26T17:04:50+00:00","dateModified":"2018-11-08T15:48:15+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"The way forward, according to some privileged access management solution providers, might be contextual multifactor authentication.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/07\/privileged-access-management-MOD.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/07\/privileged-access-management-MOD.jpg","width":800,"height":425,"caption":"Top-Tier Password Best Practices for World Password Day 2021"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/contextual-multifactor-authentication-ping-identity\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Contextual Multifactor Authentication (With Ping Identity)"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, & Services","description":"Identity Access Management (IAM) News, Best Practices and Buyer's Guide","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/3633"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=3633"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/3633\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/3375"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=3633"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=3633"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=3633"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}