Identity & Access Management: Page

identity provider

An identity provider (IdP) is a system component that provides an end user or internet-connected device with a single set of login credentials that ensures the entity is who or what it says it is across multiple platforms, applications and networks.

By Ben Lutkevich • March 11, 2024

How passwordless helps guard against AI-enhanced attacks

With all the potential of generative AI comes a major downfall: malicious actors using it in attacks. Shifting from password-based authentication can help solve the challenge.

By Andrew Shikiar • Feb. 13, 2024

password spraying

Password spraying is a cyberattack tactic that involves a hacker using a single password to try and break into multiple target accounts.

By Ben Lutkevich • Feb. 12, 2024

Understand the pros and cons of enterprise password managers

Almost half of breaches occur because of compromised credentials. Using a password manager to control how users create their IDs may be a good step to protect enterprise assets.

By Amy DeCarlo • Feb. 9, 2024

6 multi-cloud identity management tips and best practices

The more cloud services organizations adopt, the more identity challenges they face. Follow these five tips to improve multi-cloud identity management.

By Dave Shackleford • Feb. 5, 2024

Top 8 cloud IAM best practices to implement

Cloud adds a level of complexity to identity and access management. Be sure to follow these cloud IAM best practices to prevent identity-related security issues.

By Dave Shackleford • Feb. 1, 2024

7 cloud IAM challenges and how to address them

Cloud use affects how organizations manage access and identity governance. Learn about seven cloud IAM challenges and how to handle them.

By Dave Shackleford • Jan. 31, 2024

Microsoft: Legacy account hacked by Russian APT had no MFA

Microsoft has begun notifying other organizations that have been targeted in recent attacks by Midnight Blizzard, a Russian nation-state actor also known as Cozy Bear and APT29.

By Rob Wright, Alexander Culafi • Jan. 26, 2024

SonicWall acquires Banyan to boost zero-trust, SSE offerings

With its second acquisition in two months, SonicWall aims to help enterprises with growing remote workforces through zero-trust network and security service edge offerings.

By Arielle Waldman • Jan. 3, 2024

identity theft

Identity theft, also known as identity fraud, is a crime in which an imposter obtains key pieces of personally identifiable information (PII), such as Social Security or driver's license numbers, to impersonate someone else.

By Ben Lutkevich • Jan. 2, 2024

one-time password

A one-time password (OTP) is an automatically generated numeric or alphanumeric string of characters that authenticates a user for a single transaction or login one-time password session.

By Ivy Wigmore, Kathleen Richards • Dec. 28, 2023

adaptive multifactor authentication (adaptive MFA)

Adaptive multifactor authentication (MFA) is a security mechanism intended to authenticate and authorize users through a variety of contextual authentication factors.

By Stephen Bigelow • Dec. 7, 2023

Amazon IAM announcements at re:Invent 2023

At AWS re:Invent 2023, Amazon announced several new features around machine and human identities designed to improve identity and access management.

By Jack Poller • Dec. 6, 2023

5 MFA implementation tips for organizations

Organizations need to protect user accounts from malicious attackers. IAM expert Marco Fanti offers tips organizations can use when implementing MFA.

By Kyle Johnson • Dec. 1, 2023

How to solve 2 MFA challenges: SIM swapping and MFA fatigue

While MFA improves account security, attacks still exploit it. Learn about two MFA challenges -- SIM swapping and MFA fatigue -- and how to mitigate them.

By Packt Publishing, Kyle Johnson • Dec. 1, 2023

privileged identity management (PIM)

Privileged identity management (PIM) is the monitoring and protection of superuser accounts that hold expanded access to an organization's IT environments.

By Rahul Awati • Nov. 28, 2023

How passwordless authentication aids identity security

Enterprise Strategy Group's Jack Poller discusses survey results on user authentication practices and explains the security benefits of passwordless methods.

By Craig Stedman • Nov. 27, 2023

possession factor

The possession factor, in a security context, is a category of user authentication credentials based on items that the user has with them, typically a hardware device such as a security token or a mobile phone used in conjunction with a software token.

By Rahul Awati • Nov. 22, 2023

mandatory access control (MAC)

Mandatory access control (MAC) is a security strategy that restricts the ability individual resource owners have to grant or deny access to resource objects in a file system.

By Rahul Awati • Nov. 9, 2023

authentication

Authentication is the process of determining whether someone or something is who or what they say they are.

By Nick Barney, Linda Rosencrance, Mary Shacklett • Nov. 1, 2023

How to create a company password policy, with template

Use these guidelines and our free template to ensure your company's password policy sets the ground rules for strong and effective password creation and use.

By Paul Kirvan • Oct. 26, 2023

1Password stops attack linked to Okta breach

1Password said a threat actor used a HAR file stolen in the recent Okta breach to access the password manager's Okta tenant, but the activity was detected and blocked.

By Arielle Waldman • Oct. 24, 2023

soft token

A soft token is a software-based security token that generates a single-use login personal identification number (PIN).

By Paul Kirvan • Oct. 20, 2023

SailPoint extends identity security platform with data security

With DAS, privilege access management, AI and other features, SailPoint moves Atlas from an identity governance platform to an identity security platform.

By Jack Poller • Oct. 18, 2023

Google Authenticator

Google Authenticator is a mobile security application that provides a second type of confirmation for websites and online services that use two-factor authentication (2FA) to verify a user's identity before granting him or her access to secure resources.

By Robert Sheldon • Oct. 18, 2023