{"id":6804,"date":"2023-08-09T14:06:14","date_gmt":"2023-08-09T18:06:14","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=6804"},"modified":"2023-08-09T14:07:58","modified_gmt":"2023-08-09T18:07:58","slug":"best-practices-for-a-smooth-transition-to-passwordless-authentication","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/","title":{"rendered":"Best Practices for a Smooth Transition to Passwordless Authentication"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-6805\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/08\/Best-Practices-for-a-Smooth-Transition-to-Passwordless-Authentication.jpg\" alt=\"Passwordless Authentication\" width=\"800\" height=\"400\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/08\/Best-Practices-for-a-Smooth-Transition-to-Passwordless-Authentication.jpg 800w, https:\/\/solutionsreview.com\/identity-management\/files\/2023\/08\/Best-Practices-for-a-Smooth-Transition-to-Passwordless-Authentication-300x150.jpg 300w, https:\/\/solutionsreview.com\/identity-management\/files\/2023\/08\/Best-Practices-for-a-Smooth-Transition-to-Passwordless-Authentication-768x384.jpg 768w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p><em><strong>Solutions Review\u2019s\u00a0<a class=\"fui-Link ___1idfs5o f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1hu3pq6 f11qmguv f19f4twv f1tyq0we f1g0x7ka fhxju0i f1qch9an f1cnd47f fqv5qza f1vmzxwi f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh ftqa4ok f2hkw1w fhgqx19 f1olyrje f1p93eir f1h8hb77 f1x7u7e9 f10aw75t fsle3fq f17ae5zn\" title=\"https:\/\/solutionsreview.com\/solutions-review-contributor-guidelines\/\" href=\"https:\/\/solutionsreview.com\/solutions-review-contributor-guidelines\/\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\"Link Contributed Content Series\"><u>Contributed Content Series<\/u><\/a>\u00a0is a collection of contributed articles written by thought leaders in enterprise software categories. Vikram Subramanian of <a href=\"https:\/\/www.1kosmos.com\/\" target=\"_blank\" rel=\"noopener\">1Kosmos<\/a> establishes some best practices for creating a smooth transition to passwordless authentication.<\/strong><\/em><\/p>\n<p>A migration to passwordless authentication is the proverbial journey of a thousand miles. If the first step is planning the transition, implementation is the long march that follows, when all sorts of things can go wrong.<\/p>\n<p>A haphazard migration that merely replaces passwords without rethinking access policies and privileges is a recipe for trouble. The deployment could drag on or fail, while significant missteps early in the process can turn key stakeholders into objectors and doom the project. An effective transition to passwordless can avoid the worst pitfalls of deployment, smooth out bumps on the road and let the project managers score some early wins that can enhance the stakeholder buy-in.<\/p>\n<br \/>Widget not in any sidebars<br \/>\n<h2><strong>Passwordless Authentication: Best Practices for a Smooth Transition<\/strong><\/h2>\n<hr \/>\n<p>The road to passwordless authentication can be rough. Some best practices for a smooth transition include:<\/p>\n<ul>\n<li><strong>Start gradually:<\/strong> Don\u2019t try to do everything at once. Avoid a \u201cbig bang\u201d and migrate departments to the new passwordless architecture in stages. Communicate with users to let them know the advantages of the new passwordless environment. Score some early wins by focusing on the three most heavily used systems\u2014for example, virtual or personal desktops, remote access, and Single Sign-On gateways, which typically make up about 80 percent of password-based user interactions in most organizations. These can be deployed rather quickly without affecting authentication on other systems and reduces friction significantly, which leads to good reviews from users. Altogether, it allows the transition team to put some checks in the win column, while also sharply reducing attack surfaces in the network.<\/li>\n<li><strong>Provide options:<\/strong> It&#8217;s worth remembering that most people resist change, even when it improves their user experience, so consider coexistence as a deployment strategy, with side-by-side passwordless and legacy login, so users can choose when to make the move. Resistance will dissipate as the holdouts see how it works out for other users, and they will choose to move of their own accord, out of curiosity, not some corporate mandate they may resist out of resentment. One key advantage of passwordless is abstracting authentication from individual applications or SSO, which makes moving between applications seamless for users. It can also make the migration to new applications transparent to users. For example, when switching VPN products, users can scan a QR code and their face to verify their identity, instead of being issued a new username\/password and establishing a new two-factor authentication experience. Users won\u2019t know anything has changed, and the switch will be a lot less labor-intensive for the IT staff.<\/li>\n<li><strong>Track progress and adjust:<\/strong> Change management is a continuous improvement process. When an organization makes the transition to passwordless, it needs to review and analyze the process as it progresses, to make sure the migration is working. Without this analysis, there is no way to prove the return on this investment to stakeholders. In the planning stage, the team should have established a timeline and some baselines such as administration, cost and help desk times, and chosen key performance indicators (KPIs) to measure progress. Performance metrics such as login success rates, time to authenticate and user adoption rates are easily measurable to demonstrate time to ROI to stakeholders. As the process moves forward, collecting feedback is important, and a step that is often overlooked. Feedback sessions and surveys can provide insights into the user experience and any challenges emerging. Additionally, monitoring performance metrics gives staff a view into the overall effectiveness of the project. This migration is not a one-and-done process; it will need to be adjusted based on the ongoing progress, implementing changes where the process falls short, or considering where new technologies will fit into a passwordless strategy if they\u2019re added to the stack. Regular reviews will make sure the passwordless architecture is meeting the organization\u2019s needs and business goals.<\/li>\n<\/ul>\n<p>The goal of change management in a passwordless migration is to bring staff, partners, and clients into a modern, secure authentication process, simply and with a smooth user experience. This development accomplishes the key objective of managing digital transactions in the same way as in-person interactions while minimizing fraud threats and attack surfaces in the network. With a smooth deployment, the organization can manage those risks without disruptions and protect the network from the constant threat of ransomware attacks and data breaches, despite a rising tide of credential-based attacks.<\/p>\n<br \/>Widget not in any sidebars<br \/>\n","protected":false},"excerpt":{"rendered":"<p>Solutions Review\u2019s\u00a0Contributed Content Series\u00a0is a collection of contributed articles written by thought leaders in enterprise software categories. Vikram Subramanian of 1Kosmos establishes some best practices for creating a smooth transition to passwordless authentication. A migration to passwordless authentication is the proverbial journey of a thousand miles. If the first step is planning the transition, implementation [&hellip;]<\/p>\n","protected":false},"author":817,"featured_media":6805,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Best Practices for a Smooth Transition to Passwordless Authentication<\/title>\n<meta name=\"description\" content=\"Vikram Subramanian of 1Kosmos establishes some best practices for creating a smooth transition to passwordless authentication.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Vikram Subramanian\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/\",\"name\":\"Best Practices for a Smooth Transition to Passwordless Authentication\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/08\/Best-Practices-for-a-Smooth-Transition-to-Passwordless-Authentication.jpg\",\"datePublished\":\"2023-08-09T18:06:14+00:00\",\"dateModified\":\"2023-08-09T18:07:58+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/7f4d5dc7a83640bbda341e096fcce696\"},\"description\":\"Vikram Subramanian of 1Kosmos establishes some best practices for creating a smooth transition to passwordless authentication.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/08\/Best-Practices-for-a-Smooth-Transition-to-Passwordless-Authentication.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/08\/Best-Practices-for-a-Smooth-Transition-to-Passwordless-Authentication.jpg\",\"width\":800,\"height\":400,\"caption\":\"Passwordless Authentication\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Best Practices for a Smooth Transition to Passwordless Authentication\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/7f4d5dc7a83640bbda341e096fcce696\",\"name\":\"Vikram Subramanian\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/6cfdc0d6f72626b7dfebb50c9dc11083?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/6cfdc0d6f72626b7dfebb50c9dc11083?s=96&d=mm&r=g\",\"caption\":\"Vikram Subramanian\"},\"description\":\"Vikram Subramanian is the Vice President of Worldwide Solutions for 1Kosmos where he helps organizations implement identity-based passwordless authentication. He held a similar role at Simeio, a provider of managed identity and access management (IAM) services and Identity as a Service (IDaaS). He also served in technical identity positions with Sun Microsystems.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/vsubramanian\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Best Practices for a Smooth Transition to Passwordless Authentication","description":"Vikram Subramanian of 1Kosmos establishes some best practices for creating a smooth transition to passwordless authentication.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/","twitter_misc":{"Written by":"Vikram Subramanian","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/","url":"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/","name":"Best Practices for a Smooth Transition to Passwordless Authentication","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/08\/Best-Practices-for-a-Smooth-Transition-to-Passwordless-Authentication.jpg","datePublished":"2023-08-09T18:06:14+00:00","dateModified":"2023-08-09T18:07:58+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/7f4d5dc7a83640bbda341e096fcce696"},"description":"Vikram Subramanian of 1Kosmos establishes some best practices for creating a smooth transition to passwordless authentication.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/08\/Best-Practices-for-a-Smooth-Transition-to-Passwordless-Authentication.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/08\/Best-Practices-for-a-Smooth-Transition-to-Passwordless-Authentication.jpg","width":800,"height":400,"caption":"Passwordless Authentication"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/best-practices-for-a-smooth-transition-to-passwordless-authentication\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Best Practices for a Smooth Transition to Passwordless Authentication"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/7f4d5dc7a83640bbda341e096fcce696","name":"Vikram Subramanian","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/6cfdc0d6f72626b7dfebb50c9dc11083?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6cfdc0d6f72626b7dfebb50c9dc11083?s=96&d=mm&r=g","caption":"Vikram Subramanian"},"description":"Vikram Subramanian is the Vice President of Worldwide Solutions for 1Kosmos where he helps organizations implement identity-based passwordless authentication. He held a similar role at Simeio, a provider of managed identity and access management (IAM) services and Identity as a Service (IDaaS). He also served in technical identity positions with Sun Microsystems.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/vsubramanian\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/6804"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/817"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=6804"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/6804\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/6805"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=6804"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=6804"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=6804"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}