While these topics may seem somewhat disparate, there is actually a common thread amongst them: They all have security officers and end users concerned.

Single Sign-On and a Secure Portal

Over the last several years, some of the most common security articles have concerned passwords, potential hacking of accounts, data security and cloud applications. While these topics may seem somewhat disparate, there is actually a common thread among them: They all have security officers and end users concerned.

So how do we start to address the concerns and limit the vulnerability? The combination of single sign-on (SSO) with a secure portal and multi-factor authentication just may be the answer to the majority of the concerns. The number of credentials that an end user must remember to login into personal and work-related applications has most definitely exceeded the average person’s ability to remember them without some crutch. That may be writing them down on a sticky note, storing them in a plain text file or using the same set across multiple systems. The advent of SSO and password manager technology has greatly alleviated the need for these non-secure password storage/use methods. End users only need to remember the single set of credentials (one user name and password combination) to access the SSO login, and access to all authorized applications are automated as the SSO caches or remembers the apps for everything else.

The common concern with this approach has been if that one set of credentials is stolen or compromised, a nefarious individual now has the keys to the kingdom and can wreak havoc on the organization’s information and steal sensitive data. The most common approach to secure that one master key had been two-factor authentication (2FA). By using a form of 2FA – biometrics, fingerprint, keystroke recognition, PIN code, etc. – it is possible to secure the single password with something that only the real user would have.

Also, newer technology has evolved in the form of software enforced security and can be utilized with or without 2FA to make the use of the password even more secure. By introducing a secure portal, which becomes the only avenue that users can access their applications, it is possible to set further restrictions. These restrictions can include IP ranges, on/off company network, time of day, device type and location. Enhancing these measure even further, they can be defined per application, group or individual.

Let’s take a look at a quick example: John Smith works in the finance department as an accounts payable controller. He accesses the financial application only from inside the network between 9 a.m. and 5 p.m. from his desktop PC. However, he accesses email anywhere from 7 p.m. to 11 p.m. from either his PC or his smartphone. Using a combination of the restrictions, the finance application can be restricted to a PC with a specific IP on the network, from 9 a.m. to 5 p.m. while the email supplication can be accessed from the PC or an iOS smartphone with a specific MAC address on any network between 7 a.m. and 11 p.m. If someone were to gain access by hacking John’s password, they would not be able to access the finance application if they were physically on John’s desktop nor would they be able to access the email if they did not have John’s iOS device.

Combining the access rules with 2FA, such as biometrics, safeguards the single password needed to access the secure portal even more so. By locking down the access to especially sensitive applications to time of day, device, IP and network, it is completely feasible to minimize the risk associate with the SSO credential. The result is a happier employee -- as he or she now only needs to recall one set of user credentials -- and a happier security officer as they can be assured that access is tightly controlled.

Until the much-touted, ultimate demise of the password occurs, the best an organization can do is implement as many security fences around applications as possible and secure the password itself with either two- or multi-factor authentication.

Featured

  • Survey: 54% of Organizations Cite Technical Debt as Top Hurdle to Identity System Modernization

    Modernizing identity systems is proving difficult for organizations due to two key challenges: decades of accumulated Identity and Access Management (IAM) technical debt and the complexity of managing access across multiple identity providers (IDPs). These findings come from the new Strata Identity-commissioned report, State of Multi-Cloud Identity: Insights and Trends for 2025. The report, based on survey data from the Cloud Security Alliance (CSA), highlights trends and challenges in securing cloud environments. The CSA is the world’s leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud computing environment. Read Now

  • Study: Only 35 Percent of Companies Include Cybersecurity Teams When Implementing AI

    Only 35 percent of cybersecurity professionals or teams are involved in the development of policy governing the use of AI technology in their enterprise, and nearly half (45 percent) report no involvement in the development, onboarding, or implementation of AI solutions, according to the recently released 2024 State of Cybersecurity survey report from ISACA, a global professional association advancing trust in technology. Read Now

  • New Report Series Highlights E-Commerce Threats, Fraud Against Retailers

    Trustwave, a cybersecurity and managed security services provider, recently released a series of reports detailing the threats facing the retail sector, marking the second year of its ongoing research into these critical security issues. Read Now

  • Stay Secure in 2024: Updated Cybersecurity Tips for the Office and at Home

    Cyber criminals get more inventive every year. Cybersecurity threats continue to evolve and are a moving target for business owners in 2024. Companies large and small need to employ cybersecurity best practices throughout their organization. That includes security integrators, manufacturers, and end users. Read Now

Featured Cybersecurity

Webinars

New Products

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols. 3

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions. 3

  • QCS7230 System-on-Chip (SoC)

    QCS7230 System-on-Chip (SoC)

    The latest Qualcomm® Vision Intelligence Platform offers next-generation smart camera IoT solutions to improve safety and security across enterprises, cities and spaces. The Vision Intelligence Platform was expanded in March 2022 with the introduction of the QCS7230 System-on-Chip (SoC), which delivers superior artificial intelligence (AI) inferencing at the edge. 3