{"id":4973,"date":"2020-07-01T13:42:44","date_gmt":"2020-07-01T17:42:44","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=4973"},"modified":"2020-07-01T13:42:44","modified_gmt":"2020-07-01T17:42:44","slug":"3-authentication-myths-to-avoid-in-your-identity-management","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/","title":{"rendered":"3 Authentication Myths to Avoid In Your Identity Management"},"content":{"rendered":"

\"3<\/p>\n

What three authentication myths should you avoid in your identity and access management (IAM)<\/a> policies?\u00a0<\/span><\/p>\n

Unfortunately, there is as much misinformation as beneficial information out there on cybersecurity, authentication, and identity management. Oftentimes, perceived notions or bad information can affect your decisions and end up weakening your digital perimeter.\u00a0<\/span><\/p>\n

Here we examine three authentication myths and where the truth really lies.<\/span><\/p>\n


Widget not in any sidebars
<\/b>\u00a0<\/span><\/p>\n

3 Authentication Myths to Avoid In Your IAM<\/b><\/h2>\n

1. Strong Authentication Prevents All Attacks<\/b>\u00a0<\/span><\/h3>\n

It is no secret that passwords and single-factor authentication don\u2019t offer strong protection against hackers. In fact, hackers have multiple avenues to subvert or otherwise mitigate the effectiveness of passwords as a security tool. For example, hackers could simply purchase a password-cracking tool from the Dark Web. Alternatively, they could use a spear-phishing attack to coerce victims into giving up their passwords. Also, they could just guess a user\u2019s password, using data gleaned from social media or just guessing a commonly used weak password.\u00a0<\/span><\/p>\n

Therefore, enterprises deploy stronger authentication policies, often focusing on two-factor (2FA) or multifactor (MFA) strategies. On the one hand, this does help businesses secure their users and their databases; the more factors between the access request and the database, the more hackers end up deterred, choosing to find easier targets.\u00a0<\/span><\/p>\n

On the other hand, no authentication policy can 100 percent deflect or deter attacks. While hackers may face an uphill battle to subvert all of your authentication factors, they can do so with enough time and resources.\u00a0<\/span><\/p>\n

Thus your business must prepare itself with incident response plans as another layer of cybersecurity. While solutions can seriously improve your security posture, you and your workforce must become involved in it as well for optimal performance. You need to shake off this most persistent of authentication myths.\u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n

2. Authentication Begins and Ends at the Login Stage<\/b>\u00a0<\/span><\/h3>\n

Here we see an authentication myth that continues to run unchecked through enterprises. Most IT decision-makers, and indeed most employees, consider authentication as purely a tool of the login stage. In other words, one a user enters the network, authentication ends.\u00a0<\/span><\/p>\n

As we saw above, this is a dangerous mindset to bring into your identity management policy. If a hacker does slip past your login portal, then it could inflict damage to your bottom line and your reputation unchallenged. Moreover, this type of authentication doesn\u2019t account for insider threats, who by their nature can pass through login without triggering an alarm.\u00a0\u00a0<\/span><\/p>\n

Instead, you need to deploy continuous authentication across your entire network. In this model, every user remains under close observation while they operate in the network; their behaviors (gleaned through behavioral biometrics) are constantly compared to a baseline. Any aberration or suspicious behavior triggers an immediate investigation and possible remediation actions.\u00a0<\/span><\/p>\n

3. Strong Authentication Means More Friction<\/b><\/h3>\n

Many IT decision-makers stick with single-factor authentication because they know it; familiarity breeds comfort, after all. However, this supposed comfort is also predicated on the idea that passwords are convenient and provide a frictionless experience for users. In contrast, many IT decision-makers believe that multifactor authentication increases the friction of the login process.\u00a0<\/span><\/p>\n

Some decision-makers embrace the idea of friction as a byproduct of security. Others avoid it for the exact same reason. Yet security does not equate friction.\u00a0<\/span><\/p>\n

In fact, multifactor authentication\u2019s individual factors can operate passively and behind the average login and workflow. For example, geofencing and time of access request monitoring can help evaluate the validity of a user while not requiring active inputs. On the continuous authentication front, behavioral biometrics simply monitors users as they work, using that data as verification.\u00a0<\/span><\/p>\n

How to Learn More About Authentication Myths<\/b><\/h3>\n

To dispel preconceived notions about authentication, check out the Identity Management Buyer\u2019s Guide<\/a>. We cover the top solution providers and key capabilities in depth.\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/b><\/p>\n","protected":false},"excerpt":{"rendered":"

What three authentication myths should you avoid in your identity and access management (IAM) policies?\u00a0 Unfortunately, there is as much misinformation as beneficial information out there on cybersecurity, authentication, and identity management. Oftentimes, perceived notions or bad information can affect your decisions and end up weakening your digital perimeter.\u00a0 Here we examine three authentication myths […]<\/p>\n","protected":false},"author":41,"featured_media":1251,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[142,770,125,1501,16,1204,76,425,70,1502,124,91],"acf":[],"yoast_head":"\n3 Authentication Myths to Avoid In Your Identity Management<\/title>\n<meta name=\"description\" content=\"What three authentication myths should you avoid in your identity and access management (IAM) policies?\u00a0We explore them here.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/\",\"name\":\"3 Authentication Myths to Avoid In Your Identity Management\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/08\/binary-freakout.jpg\",\"datePublished\":\"2020-07-01T17:42:44+00:00\",\"dateModified\":\"2020-07-01T17:42:44+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"What three authentication myths should you avoid in your identity and access management (IAM) policies?\u00a0We explore them here.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/08\/binary-freakout.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/08\/binary-freakout.jpg\",\"width\":800,\"height\":350,\"caption\":\"3 Authentication Myths to Avoid In Your Identity Management\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"3 Authentication Myths to Avoid In Your Identity Management\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"3 Authentication Myths to Avoid In Your Identity Management","description":"What three authentication myths should you avoid in your identity and access management (IAM) policies?\u00a0We explore them here.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/","url":"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/","name":"3 Authentication Myths to Avoid In Your Identity Management","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/08\/binary-freakout.jpg","datePublished":"2020-07-01T17:42:44+00:00","dateModified":"2020-07-01T17:42:44+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"What three authentication myths should you avoid in your identity and access management (IAM) policies?\u00a0We explore them here.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/08\/binary-freakout.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/08\/binary-freakout.jpg","width":800,"height":350,"caption":"3 Authentication Myths to Avoid In Your Identity Management"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/3-authentication-myths-to-avoid-in-your-identity-management\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"3 Authentication Myths to Avoid In Your Identity Management"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4973"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=4973"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4973\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/1251"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=4973"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=4973"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=4973"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}