Coronavirus: Uncertainty all around
Coronavirus has descended on the world with unnerving suddenness, and it’s dramatically changing the way we live and work. Read more: https://zd.net/2Qk7kr7
In the midst of the coronavirus pandemic, many businesses are asking — or mandating — that office-based employees work from home. Millions of employees that have been logging in from workstations on corporate networks are now logging in from home, or elsewhere on public networks. Stronger authentication, and VPNs, that used to be required for a subset of employees, at any given time, become the point of entry for your entire workforce. So, what happens if your multifactor authentication (MFA) provider’s infrastructure goes down?
Coronavirus: Business and technology in a pandemic
From cancelled conferences to disrupted supply chains, not a corner of the global economy is immune to the spread of COVID-19.
Read More
For organizations that deal with personally identifiable information (PII) and other sensitive information, having remote workers log in with only username/password, even over VPN, is not acceptable. A critical piece of any MFA platform service is a high-availability configuration, to ensure authentication requests are processed if the infrastructure fails or parts of the network are overloaded.
So, let’s say you have high availability in place. What happens when the assurances of high availability from a single MFA vendor are not enough, what should the organization do? A client at a banking institution that I spoke with raised some excellent points on the challenges with addressing this: Swapping in a second vendor isn’t easy — there’s purchase and licensing, integration to the VPN platform, user provisioning, mobile-app-authenticator setup, VPN client configuration changes, user (re)training, and many other considerations. Building a parallel VPN entry point that uses a different MFA solution is costly and has the same issues as a swap-out. Plus, there is the increased risk of expired tokens, user confusion, and system upkeep. In short, these challenges are daunting to implement and introduce new challenges. Therefore, consider a more targeted approach.
Take the following steps as you develop an MFA resilience plan:
This post was written by Senior Analyst Sean Ryan, and it originally appeared here.
Article source: https://www.zdnet.com/article/a-spike-in-home-workers-raises-mfa-resilience-questions/#ftag=RSSbaffb68