{"id":4337,"date":"2019-03-29T12:46:06","date_gmt":"2019-03-29T16:46:06","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=4337"},"modified":"2019-03-29T12:46:06","modified_gmt":"2019-03-29T16:46:06","slug":"enterprises-why-you-need-better-third-party-iam","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/","title":{"rendered":"Enterprises: Why You Need Better Third-Party IAM"},"content":{"rendered":"

\"Enterprises:<\/p>\n

Why does your enterprise need to invest in better third-party IAM (identity and access management)?<\/span><\/p>\n

In part, you can attribute this need to the continued prevalence of outsourcing; the risks associated with third-party access stem directly from this commonplace business practice.<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

Much like digital transformation, outsourcing offers as many benefits as they create risks. Outsourcing allows enterprises to manage their business processes and tasks, saving them internal costs and hiring. <\/span><\/p>\n

Perhaps then it is so small wonder enterprises spend increasing amounts on outsourcing. In fact, according to technology research firm Gartner and identity security provider Identity Automation, IT outsourcing should grow to become a $335 billion industry this year. <\/span><\/p>\n

However, so much outsourcing results in a proportional rise in non-traditional digital identities connecting to your network. Unfortunately, legacy IAM systems can\u2019t properly process or protect either these third-party identities or your enterprise; they just don’t have the capabilities to process anything beyond the closed-circuit IT environments and limited workforces of an exclusively on-premises world. <\/span><\/p>\n

You need to understand the potential pitfalls of third-party IAM, and how a next-gen identity and access management<\/a> solution can help secure your enterprise. <\/span><\/p>\n

Here\u2019s what to know about third-party IAM:<\/span><\/p>\n

The Problems with Third-Party IAM<\/b><\/h2>\n

Third-party identities and users connect to, operate on, and interact with your IT environment; these include human users such as vendors and partners, but they can also include nonhuman actors such as applications or databases. \u00a0<\/span><\/p>\n

However, third-party actors generally aren\u2019t listed in the enterprise Active Directory of a legacy identity and access management solution. As such, these identities don\u2019t trigger the usual protocols of authentication policies. Additionally, they may not activate the normal processes of provisioning, deprovisioning, and access auditing as traditional identities do; third-party IAM on a legacy solution could suffer from access request, lifecycle tasks<\/a>, and privilege issues. \u00a0\u00a0<\/span><\/p>\n

Let\u2019s explore some of the issues with third-party IAM in greater depth.<\/span><\/p>\n

Privileges within Third-Party IAM<\/b><\/h3>\n

What can you third-party actors access in your network? <\/span><\/p>\n

You should not treat this question as idle. Several major enterprise breaches, including the Home Depot and Target breaches, began with hackers exploiting inappropriate third-party privileges. Controlling the privileges of all the actors is vital to ensuring better third-party IAM. \u00a0<\/span><\/p>\n

Third-party IAM should follow the Principle of Least Privileges<\/a>; this states users should only possess the permissions necessary to performing their job duties and no more<\/a>. However, legacy identity and access management solutions don\u2019t have the privilege visibility necessary to enforcing this principle. Otherwise, these identities could allow malicious actors to access sensitive databases and assets far too easily. \u00a0<\/span><\/p>\n

Moreover, legacy solutions often can\u2019t prevent third-party actors from escalating their own privileges without oversight or approval; both hackers and insider threats can exploit this escalation to gain permissions beyond the scope of the user\u2019s identity. \u00a0<\/span><\/p>\n

Your third-party IAM must be subject to identity governance and strong role management; your IT security team should monitor and regulate the permissions each external actor connecting to the network; they must limit them to only their explicit functions. <\/span><\/p>\n

Additionally, your enterprise could benefit from fine-grained access controls to address remote vendor access. But a legacy IAM solution can\u2019t provide either function. <\/span><\/p>\n

Visibility in Identity and Access Management<\/b><\/h3>\n

A lack of visibility constitutes another third-party IAM issue. If your legacy identity and access management solution only monitors identities in the Active Directory, third-party users could completely evade their detection capabilities. <\/span><\/p>\n

In turn, this allows hackers to use these identities as convenient stepping stones into your IT environment; they can conceal their movements and access requests from view, and thus cause untold amounts of damage before detection and remediation. <\/span><\/p>\n

You identity security solution should provide visibility into all of the users connecting to your network. Additionally, it should establish a behavior baseline for each identity to more quickly identify suspicious actions and suspend permissions pending an investigation. \u00a0\u00a0\u00a0<\/span><\/p>\n

How to Improve Your Third-Party IAM<\/b><\/h2>\n

Now that you know your third-party IAM is inadequate, what can you do? \u00a0<\/span><\/p>\n

First, Replace Your Old IAM Solution<\/b><\/h3>\n

Legacy solutions cannot provide protections your enterprise needs, plain and simple. Not only does this apply to providing third-party IAM (which is true) it also can\u2019t handle enterprise digital transformation or cloud adoption. In some cases, legacy identity and access management can\u2019t even process hybrid environments. <\/span><\/p>\n

Of course, legacy identity security solutions can offer a comforting sense of familiarity and a recognizable user interface. However, they limit how your enterprise can handle identity and access management issues; some still rely on spreadsheets and emails to track third-party relationships.<\/span><\/p>\n

Initiate MFA for Third-Party Users<\/b> \u00a0<\/span><\/h3>\n

You should deploy multifactor authentication<\/a> on all of your identities. Single-factor authentication such as passwords allows hackers to too easily guess or crack the login. Two factor is stronger but can still be spoofed. Only multifactor authentication can deter all but the most dedicated and talented hackers and insider threats. <\/span><\/p>\n

Every user should be required to input multiple authentication factors before they can access the full range of their databases and business processes. You can do this as an upfront request or as a step-up authentication model. What matters most in this case is consistency across all identities. \u00a0<\/span><\/p>\n

Federate Your Partner Access<\/b><\/h3>\n

Federating your third-party IAM coordinates your own authentication with the authentication efforts of your partners; this allows you to ensure your own security by utilizing the security of others. <\/span><\/p>\n

For example, home-realm federation forces third-party actors to log into their home network before they can log into yours. This ensures that if they were let go of their position at your third-party partner, they also lose access to your IT environment. \u00a0<\/span><\/p>\n

Vet Your Third-Parties <\/b><\/h3>\n

We\u2019ve said before you cannot consider your identity security or overall cybersecurity policies \u201cset-it-and-forget-it\u201d affairs. We stand by that statement, now more than ever. <\/span><\/p>\n

For example, you need to impart the seriousness of identity and access management best practices on your employees through continual education programs and evaluations. Additionally, you need to participate in your identity security by ensuring employees and third-party users have permissions which follow the Principle of Least Privilege. <\/span><\/p>\n

However, third-party IAM requires far more than that. Before making any business arrangement, your enterprise must take the time to verify the reliability and legitimacy of your third-parties. Selecting the most affordable option may blind you to potential security issues in their processes or in how they handle their employee identity lifecycle. If they continue to risk their identity security for the sake of efficiency or profitability, partnering with them could put you both in significant danger. <\/span><\/p>\n

Cybersecurity is a two-way street. You need to look both ways if you intend to cross safely. \u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/p>\n","protected":false},"excerpt":{"rendered":"

Why does your enterprise need to invest in better third-party IAM (identity and access management)? In part, you can attribute this need to the continued prevalence of outsourcing; the risks associated with third-party access stem directly from this commonplace business practice. Much like digital transformation, outsourcing offers as many benefits as they create risks. Outsourcing […]<\/p>\n","protected":false},"author":41,"featured_media":4338,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[142,125,16,112,76,286,397,188,70,145,124,91,123,90,25,523,766],"acf":[],"yoast_head":"\nEnterprises: Why You Need Better Third-Party IAM<\/title>\n<meta name=\"description\" content=\"Why does your enterprise need to invest in better third-party IAM (identity and access management)? We explore the issues and solutions here!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/\",\"name\":\"Enterprises: Why You Need Better Third-Party IAM\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/03\/why-you-need-better-third-party-iam-1.jpg\",\"datePublished\":\"2019-03-29T16:46:06+00:00\",\"dateModified\":\"2019-03-29T16:46:06+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"Why does your enterprise need to invest in better third-party IAM (identity and access management)? We explore the issues and solutions here!\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/03\/why-you-need-better-third-party-iam-1.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/03\/why-you-need-better-third-party-iam-1.jpg\",\"width\":800,\"height\":400,\"caption\":\"Enterprises: Why You Need Better Third-Party IAM\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Enterprises: Why You Need Better Third-Party IAM\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, & Services\",\"description\":\"Identity Access Management (IAM) News, Best Practices and Buyer's Guide\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Enterprises: Why You Need Better Third-Party IAM","description":"Why does your enterprise need to invest in better third-party IAM (identity and access management)? We explore the issues and solutions here!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/","url":"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/","name":"Enterprises: Why You Need Better Third-Party IAM","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/03\/why-you-need-better-third-party-iam-1.jpg","datePublished":"2019-03-29T16:46:06+00:00","dateModified":"2019-03-29T16:46:06+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"Why does your enterprise need to invest in better third-party IAM (identity and access management)? We explore the issues and solutions here!","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/03\/why-you-need-better-third-party-iam-1.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/03\/why-you-need-better-third-party-iam-1.jpg","width":800,"height":400,"caption":"Enterprises: Why You Need Better Third-Party IAM"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/enterprises-why-you-need-better-third-party-iam\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Enterprises: Why You Need Better Third-Party IAM"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, & Services","description":"Identity Access Management (IAM) News, Best Practices and Buyer's Guide","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4337"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=4337"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4337\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/4338"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=4337"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=4337"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=4337"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}