Intelice’s Solution – Multi-Factor Authentication

The majority of today’s data breaches are a result of compromised credentials.  We strongly urge our partners to take action now to implement a multi-factor authentication solution to protect yourself and your customers.

We’ve talked about the necessity of powerful passwords in this blog, but remember this chart the next time you go to create a new credential. If you are like most of the world, you aren’t creating complex enough passwords to protect yourself. This is why we know multi-factor authentication is absolutely necessary.

Multi-factor authentication (MFA) is a process in which users are prompted during the sign-in process for an additional form of identification, such as a code on their cellphone or a fingerprint scan.

If you only use a password to authenticate a user, it leaves an insecure vector for attack. If the password is weak or has been exposed elsewhere, an attacker could be using it to gain access. When you require a second form of authentication, security is increased because this additional factor isn’t something that’s easy for an attacker to obtain or duplicate.

The Intelice solution is a simple integration leveraging the power of Azure AD.

Like other multi-factor authenticators, Azure AD Multi-Factor Authentication works by requiring two or more of the following authentication methods:

• Something you know, typically a password.
• Something you have, such as a trusted device that’s not easily duplicated, like a phone or hardware key.
• Something you are – biometrics like a fingerprint or face scan.

Azure AD Multi-Factor Authentication can also further secure password reset. When users register themselves for Azure AD MFA, they can also register for self-service password reset in one step. Administrators can choose forms of secondary authentication and configure challenges for MFA based on configuration decisions.

You don’t need to change apps and services to use Azure AD Multi-Factor Authentication. The verification prompts are part of the Azure AD sign-in, which automatically requests and processes the MFA challenge when needed.