Understand multi-factor authentication (MFA) but not adaptive authentication? Not sure where one term ends and the other begins? Keen to know what all adaptive noise is about? Read on\u2026<\/p>\n
MFA & adaptive authentication: what\u2019s the difference?<\/strong><\/p>\n Think of it like this: Adaptive authentication is an evolved form of MFA.\u00a0 It applies the principles of MFA, but instead of issuing blanket procedures for everyone to follow under all circumstances, it issues challenges intelligently instead, according to a predetermined risk model. This enables an organisation to apply precisely the right level of gateway security to each and every login request.<\/p>\n An adaptive system is purpose-built to measure the risk of a user\u2019s login, along with their post-login activities, to determine the level of risk their access request poses to the business. Appropriate levels of authentication are then triggered to protect an organisation\u2019s data, websites, portals, browsers and applications.<\/p>\n What are the benefits of adaptive authentication?<\/strong><\/p>\n There are a variety of significant benefits that set adaptive authentication apart from traditional multi-factor authentication:<\/p>\n It optimises the user\u2019s security experience.<\/em><\/strong><\/p>\n None of us want our network experience to be inhibited by needlessly heavy-handed levels of authentication. At the same time, however, we all accept that some access requests require more security than others. Adaptive authentication enables precisely the most appropriate level of \u2018friction\u2019 to be applied to each and every access request. Looking beyond traditional binary authentication to adaptive risk-based solutions allows companies to maintain strong data security but not at the expense of usability.<\/p>\n It enables the IT department to embody an organisation\u2019s risk policies.<\/em><\/strong><\/p>\n An organisation can lock down its most sensitive gateways with strong multi-factor authentication, ensuring only those with network clearance can participate in the authentication process (blocking entry completely for everyone else). At the same time, unfettered access (or a weaker form of authentication like a username and password) can be applied when access to non-sensitive data is requested.<\/p>\n It solves the BYOD security headache.<\/em><\/strong><\/p>\n In the age of BYOD, everyone wants to access corporate data remotely, from different devices.<\/p>\n Not only can adaptive authentication differentiate between different mobile devices (and their varying security vulnerabilities) it can also address the risks associated with the remote access networks used to connect to the corporate gateway. For example, if an employee uses a lower risk connection, like connecting their work-protected laptop to the corporate network while in the head office, an adaptive authentication platform could apply only a basic authentication challenge, such as a username and password. Should that employee switch to their personal smartphone, however, and attempt to connect beyond the network perimeter, via Starbucks public Wi-Fi, for example, an adaptive authentication platform would automatically recognise the increased in risk and apply a stronger authentication challenge before granting access, if indeed it grants it at all. All such scenarios can be planned for, assessed for risk, and dealt with accordingly.<\/p>\n