Multi-Factor Authentication & Authorisation
0 likes•165 views
Attackers are increasingly targeting external users like customers and partners in addition to employees. Multi-factor authentication (MFA) and authorization should be used to verify both internal and external users' identities beyond just a username and password. The Ubisecure Identity Platform supports MFA and authorization across web, mobile, and legacy applications to provide secure and convenient login experiences for external users through different authentication methods.
Multi-Factor Authentication & Authorisation
- 1. Attackers looking to compromise credentials through phishing and social engineering are no longer just interested in employees, they are interested in every stakeholder accessing your applications including all external users such as your customers, partners and contractors. As the value of an interaction or transaction increases so does the requirement to ensure that the user is the true owner and legitimate assertor of the system identity. Multi-factor Authentication (MFA) is a method of verifying a customer’s identity by requiring them to present more than one piece of identifying information or form factor. Authorisation is the function of specifying access control rights/privileges to resources, applications or data. MFA and Authorisation should not just be reserved just for employees. It should be readily extended to external users. MULTI-FACTOR AUTHENTICATION (MFA) & AUTHORISATION Step-up MFA and Authorisation for web, mobile, device and legacy applications QUICKLY DEPLOY A SOLUTION PROVIDING VARIABLE LEVELS OF AUTHENTICATION. Utilise off the shelf authorisation capabilities with rich group management and 3rd party integration. Customers, partners and external users experience simplified and frictionless login workflows. The solution supports a variety of different MFA methods and global identity provider ‘identities’ across different assurance levels. Benefit from step-up authentication when different situations require different strategies for authentication and authorisation, for example social identities may be used for initial login, but financial transactions require additional forms of authentication or a stronger 3rd party identity. THE UBISECURE IDENTITY PLATFORM PROVIDES SUPPORT FOR MULTIPLE AUTHENTICATION METHODS - FROM BASIC USERNAME/PASSWORD, SMART DEVICES AUTHENTICATOR APPS, PASSWORDLESS (SMS AND EMAIL OTP) OTP LISTS, PKI, BIOMETRICS, EXTERNAL FEDERATED AUTHENTICATORS AND MORE. SECURE IDENTITIES & ENSURE PRIVACY - USE CASE
- 2. CONVIENIENT & SECURE CUSTOMER FOCUSED WORKFLOW No matter what your industry or vertical, everything starts with the customer journey. You need to provide convenient and secure journey for your customers. Security requirements should not negatively impact convenience by demanding complex processes. Lower level authentication methods can facilitate capture and conversion of initial prospects, but when conducting transactions, stronger levels of authentication will be required. The goal is to make the authentication, and therefore the user experience, seamless and transparent to the user. The Ubisecure Identity Platform makes sure your security needs combined with a consistently excellent customer journey. STRENGTH OF AUTHENTICATION METHOD There are many methods available to authenticate external users. The many authentication methods mean that you can select the right kind of user identity and form-factor authentication for all of your assets - from capturing consumer users using social media identities through to protecting high-value commercial transactions with PKI powered mobile apps and biometrics. You can also improve your customer journey while protecting your data by only deploying MFA only in the specific situations that need MFA. CENTRALISED AUTHORISATION POLICY MANAGEMENT The centralised policy management makes it easy for you to control and audit how your environment consumes user attributes and allows you to easily change them due to commercial, corporate, security or regulatory demands. Step-up MFA and Authorisation for web, mobile, device and legacy applications We can help you get started building MFA and Authorisation into your applications - visit www.ubisecure.com or talk to us today. About Ubisecure Inc Founded in 2002, Ubisecure is a pioneering b2b and b2c Identity Services software and cloud services provider dedicated to enabling the true potential of digital business. Ubisecure’s Identity Platform comprises of Customer Identity & Access Management (CIAM) and Identity-as-a-Service (IDaaS) solutions that allow businesses to put the customer’s identity at the beginning of their journey to create a seamless, secure experience across digital services and devices. Uniquely, the Identity Platform also connects digital services and Identity Providers such as social networks, mobile networks, banks and Governments, to allow Service Providers to benefit from the rich, verified identities to streamline login, registration and customer engagement while improving privacy and consent around personal data sharing. Ubisecure is headquartered in Finland, with offices in the UK, and works through a network of local and global system integrator partners. E: [email protected] | FI: +358 9 251 77250 UK: +44 1273 957 613 SE: +46 70 603 34 83 | www.ubisecure.com © 2018 Ubisecure Inc. All rights reserved. SECURE IDENTITIES & ENSURE PRIVACY - USE CASE