{"id":4256,"date":"2019-02-14T15:53:33","date_gmt":"2019-02-14T19:53:33","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=4256"},"modified":"2019-02-14T15:55:31","modified_gmt":"2019-02-14T19:55:31","slug":"the-diversity-of-multifactor-authentication-methods","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/","title":{"rendered":"The Diversity of Multifactor Authentication Methods"},"content":{"rendered":"<p style=\"text-align: justify\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-2491\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/endpoint-security-solution-capabilities-mod.jpg\" alt=\"The Diversity of Multifactor Authentication Methods\" width=\"800\" height=\"400\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/endpoint-security-solution-capabilities-mod.jpg 800w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/endpoint-security-solution-capabilities-mod-300x150.jpg 300w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/endpoint-security-solution-capabilities-mod-768x384.jpg 768w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/endpoint-security-solution-capabilities-mod-540x270.jpg 540w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/endpoint-security-solution-capabilities-mod-162x81.jpg 162w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/endpoint-security-solution-capabilities-mod-360x180.jpg 360w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Passwords and single-factor authentication processes in general no longer suffice in protecting users\u2019 identities. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Regardless of your password security strategy\u2014which we commented on at length in past articles\u2014passwords remain insecure for a number of reasons. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">For example, passwords are: <\/span><\/p>\n<ul style=\"text-align: justify\">\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Infrequently changed. <\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Frequently reused across accounts. <\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Easily guessed or cracked. <\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Often shared among employees.<\/span><\/li>\n<\/ul>\n<p style=\"text-align: justify\"><div class=\"widget\"><div class=\"aside-card\">\t\t\t<div class=\"textwidget\"><p><a class=\"iam-inject\" href=\"https:\/\/solutionsreview.com\/identity-management\/biometric-authentication-buyers-guide\/\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1682\" title=\"Biometric Authentication Buyer's Guide\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/01\/biometric-authentication-speedbump-cta.jpg\" alt=\"Download Link to Biometric Authentication Buyer's Guide\" width=\"800\" height=\"225\" \/><\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">While the end of the password era remains in the far future, assuming it comes at all, enterprises need to embrace new authentication protocols; these must supplement their identity security beyond what passwords can offer. Therefore, enterprises must deploy multifactor authentication methods. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Some reading this article may believe they know the multifactor authentication methods available to them. However, the white paper \u201c<\/span><a href=\"https:\/\/solutionsreview.com\/identity-management\/optimal-idm-typing-biometrics-and-other-multi-factor-authentication-methods\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">Typing Biometrics and Other: Multi-Factor Authentication Methods: When Passwords Are Not Enough<\/span><\/a><span style=\"font-weight: 400\">\u201d by TypingDNA and Optimal IdM illustrates how much diversity exists in identity security. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Here are some of their key findings: <\/span><\/p>\n<h3 style=\"text-align: justify\"><b>Why You Need Multifactor Authentication Methods<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Optimal IdM and TypingDNA cite Verizon\u2019s finding that 81% of data breaches result from weak, default, or stolen passwords. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">The authors emphasize the dangers of stolen passwords via phishing attacks or analog hard copies containing written copies of the credentials. However, the authors also acknowledge the responsibility of the IT security team to monitor and secure their users\u2019 identities. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Even when enterprises enact complex password policies and single sign-on, it doesn\u2019t change that hackers only need to acquire one piece of information to infiltrate the network. Having more than one authentication factor reduces the chances of a hacker obtaining access; the more they have to steal, the more difficult the challenge. <\/span><\/p>\n<h3 style=\"text-align: justify\"><b>What Multifactor Authentication Methods Exist? <\/b><span style=\"font-weight: 400\">\u00a0\u00a0<\/span><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">When we discuss multifactor authentication methods, most people think of a few common factors: <\/span><\/p>\n<ul style=\"text-align: justify\">\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Biometric authentication, almost always in physiological terms such as fingerprints, iris recognition, or facial recognition. <\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">An SMS text message containing a PIN or a temporary password sent to a secure mobile device. <\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">A hard token, which the user brings to the endpoint to authenticate their identity. <\/span><\/li>\n<\/ul>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">All of these multifactor authentication methods deserve attention and recognition. However, this list only scratches the surface of possible MFA methods. Optimal IdM and TypingDNA also recognize: <\/span><\/p>\n<ul style=\"text-align: justify\">\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Typing Biometrics<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Email Verification<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">TOTP<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">PUSH mobile device notification<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Universal Second Factor<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Client Certificates<\/span><\/li>\n<\/ul>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Even this list doesn\u2019t do the full list the solution providers offer justice. Regardless, enterprises should diversify their thinking of multifactor authentication methods. Their choices of factors should instead reflect their digital reality\u2014the costs involved in deployment, the user experience, the portability of the factors, and customization options. <\/span><\/p>\n<h3 style=\"text-align: justify\"><b>Remember The Power of Granularity<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">As much as enterprises can benefit from multifactor authentication, the authors stress it may not be appropriate in all scenarios. Not every users\u2019 login requires the high level of security (with the exception of certain sensitive verticals and industries) which comes with MFA. MFA can affect the user experience in unexpected ways, which can, in turn, affect productivity. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Therefore, enterprises should look to deploying granular MFA, which can include protocols as diverse as adaptive authentication, risk-based policy-adaptive authentication, and step-up authentication. In all cases, the principle stays consistent: MFA comes into play when the security calculation deems the risk at a certain level. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">If you would like to learn more, you can download the \u201c<\/span><a href=\"https:\/\/solutionsreview.com\/identity-management\/optimal-idm-typing-biometrics-and-other-multi-factor-authentication-methods\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">Typing Biometrics and Other: Multi-Factor Authentication Methods: When Passwords Are Not Enough<\/span><\/a><span style=\"font-weight: 400\">\u201d white paper by Optimal IdM and TypingDNA here.<\/span><\/p>\n<p style=\"text-align: justify\"><br \/>Widget not in any sidebars<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Passwords and single-factor authentication processes in general no longer suffice in protecting users\u2019 identities. Regardless of your password security strategy\u2014which we commented on at length in past articles\u2014passwords remain insecure for a number of reasons. For example, passwords are: Infrequently changed. Frequently reused across accounts. Easily guessed or cracked. Often shared among employees. While the [&hellip;]<\/p>\n","protected":false},"author":41,"featured_media":2491,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[142,125,237,16,76,70,364,503,91,802],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>The Diversity of Multifactor Authentication Methods<\/title>\n<meta name=\"description\" content=\"\u201cTyping Biometrics and Other: MultiFactor Authentication Methods: When Passwords Are Not Enough\u201d illustrates how much diversity exists in identity.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/\",\"name\":\"The Diversity of Multifactor Authentication Methods\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/endpoint-security-solution-capabilities-mod.jpg\",\"datePublished\":\"2019-02-14T19:53:33+00:00\",\"dateModified\":\"2019-02-14T19:55:31+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"\u201cTyping Biometrics and Other: MultiFactor Authentication Methods: When Passwords Are Not Enough\u201d illustrates how much diversity exists in identity.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/endpoint-security-solution-capabilities-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/endpoint-security-solution-capabilities-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"The Diversity of Multifactor Authentication Methods\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The Diversity of Multifactor Authentication Methods\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, &amp; Services\",\"description\":\"Identity Access Management (IAM) News, Best Practices and Buyer&#039;s Guide\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The Diversity of Multifactor Authentication Methods","description":"\u201cTyping Biometrics and Other: MultiFactor Authentication Methods: When Passwords Are Not Enough\u201d illustrates how much diversity exists in identity.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/","url":"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/","name":"The Diversity of Multifactor Authentication Methods","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/endpoint-security-solution-capabilities-mod.jpg","datePublished":"2019-02-14T19:53:33+00:00","dateModified":"2019-02-14T19:55:31+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"\u201cTyping Biometrics and Other: MultiFactor Authentication Methods: When Passwords Are Not Enough\u201d illustrates how much diversity exists in identity.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/endpoint-security-solution-capabilities-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/endpoint-security-solution-capabilities-mod.jpg","width":800,"height":400,"caption":"The Diversity of Multifactor Authentication Methods"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/the-diversity-of-multifactor-authentication-methods\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"The Diversity of Multifactor Authentication Methods"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, &amp; Services","description":"Identity Access Management (IAM) News, Best Practices and Buyer&#039;s Guide","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4256"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=4256"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4256\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/2491"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=4256"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=4256"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=4256"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}