{"id":4380,"date":"2019-05-01T09:31:33","date_gmt":"2019-05-01T13:31:33","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=4380"},"modified":"2019-05-01T09:31:33","modified_gmt":"2019-05-01T13:31:33","slug":"deploying-multifactor-authentication-first-steps-in-identity-security","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/deploying-multifactor-authentication-first-steps-in-identity-security\/","title":{"rendered":"Deploying Multifactor Authentication: First Steps in Identity Security"},"content":{"rendered":"

\"Deploying<\/p>\n

Your enterprise needs to begin deploying multifactor authentication solution on your network. No compromises. Full stop.<\/span><\/p>\n

These strong statements come with the backing of mountains of cybersecurity and identity management expert research. As much as enterprises still rely on password-based single-factor authentication, it just doesn\u2019t work. Indeed, hackers specifically target these systems because they represent easy marks. Moreover, single-factor authentication leaves you vulnerable to insider threats or even non-human automated attacks.<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

But how should your enterprise go about deploying multifactor authentication? Which factors should you employ in your identity security<\/a> policies? Does step-up authentication make sense for your environment? Can you balance identity management with effective business practices? <\/span><\/p>\n

We answer these questions below. <\/span><\/p>\n

Why Single Factor Authentication Doesn\u2019t Work<\/b><\/h2>\n

Oftentimes, cybersecurity inertia causes as much damage as evolving digital threats. Enterprises become comfortable and familiar with their current identity and access management solution. Therefore, they continue to use it even as hackers discover and deploy new methods of subverting or exploiting. <\/span><\/p>\n

Unsurprisingly, this applies to single-factor, password-based authentication. For years it served as the foundation of identity management. Only in the past few years have cybersecurity experts and enterprises realized its inherent weaknesses. The latter, though, continues to struggle with the change. <\/span><\/p>\n

According to researchers, passwords offer very little in terms of actual identity security. Even inexperienced hackers can crack them or purchase software which automates cracking them. Worse, hackers can now use publicly available information, such as through social media, threat actors can often guess users\u2019 passwords. Distressingly, given the horrible password practices most users embrace, hackers often guess right. <\/span><\/p>\n

Compounding matters further, users tend to reuse their passwords on multiple accounts, including their work accounts. As a result, any data breach could give threat actors more weapons in their credential stuffing attacks. <\/span><\/p>\n

Obviously, these facts argue strongly for deploying multifactor authentication yesterday. But how can you do it most effectively? <\/span><\/p>\n

Why Deploying Multifactor Authentication Matters<\/b><\/h2>\n

The principle rule of thumb regarding authentication is the more steps between access request and access granted, the more secure your enterprise. <\/span><\/p>\n

Two-factor authentication, therefore, proves much more effective than password-only authentication for exactly this reason. However, more talented threat actors can circumvent the second step in two-factor authentication. In most cases, they can interfere with SMS messaging and trick employees into giving their passwords away without realizing it. <\/span><\/p>\n

That\u2019s why deploying multifactor authentication\u2014with three, four, five, or more steps, offers so much more identity security in the long term.<\/span><\/p>\n

Of course, the most dedicated and experienced hackers could subvert your identity security with MFA. However, this would cost them time and effort they could invest in attacking weaker targets; hackers prefer to follow the path of least resistance. Deploying multifactor authentication thus works as cybersecurity protection and as a deterrent.<\/span><\/p>\n

Here\u2019s how you can get the best identity and access management today. <\/span><\/p>\n

Get the Right Solution<\/b><\/h3>\n

Deploying multifactor authentication begins with selecting the right IAM<\/a> or privileged access management (PAM<\/a>) solution for your enterprise. Privileged access management especially helps protect users\u2019 identities through strong authentication, including your superusers. In fact, many serve as the innovators of MFA factors. <\/span><\/p>\n

However, not every solution is created equal. Put another way, your distinct business use cases poses unique identity management challenges which not every solution can accommodate. Additionally, the demands of your privileged users naturally differ from those of other enterprises; the number of privileged users, their involvement in your business processes, and what databases they access regularly should affect how you begin deploying multifactor authentication. <\/span><\/p>\n

Thus, you must select a solution which fits your needs. Don\u2019t skimp on the self-assessment.<\/span><\/p>\n

Deploy the Right Factors<\/b><\/h3>\n

Multifactor authentication can involve any number of potential factors<\/a>. These can include: <\/span><\/p>\n