Implementing Multifactor Authentication

Key Features

• Gain proficiency in using solutions like Okta, Ping Identity, and ForgeRock within the IAM domain
• Thwart authentication breaches using pragmatic strategies and lessons derived from real-world scenarios
• Choose the right MFA solutions to enhance your organization's security

Book Description

MFA has emerged as an essential defense strategy in the wide-ranging landscape of cybersecurity. This book is a comprehensive manual that assists you in picking, implementing, and resolving issues with various authentication products that support MFA. It will guide you to bolster application security without sacrificing the user experience.

You'll start with the fundamentals of authentication and the significance of MFA to familiarize yourself with how MFA works and the various types of solutions currently available. As you progress through the chapters, you'll learn how to choose the proper MFA setup to provide the right combination of security and user experience. The book then takes you through methods hackers use to bypass MFA and measures to safeguard your applications. After familiarizing yourself with enabling and managing leading cloud and on-premise MFA solutions, you’ll see how MFA efficiently curbs cyber threats, aided by insights from industry best practices and lessons from real-world experiences. Finally, you’ll explore the significance of innovative advancements in this domain, including behavioral biometrics and passkeys.

By the end of the book, you'll have the knowledge to secure your workforce and customers, empowering your organization to combat authentication fraud.

What you will learn

• Evaluate the advantages and limitations of MFA methods in use today
• Choose the best MFA product or solution for your security needs
• Deploy and configure the chosen solution for maximum effectiveness
• Identify and mitigate problems associated with different MFA solutions
• Reduce UX friction with ForgeRock and behavioral biometrics
• Stay informed about technologies and future trends in the field

Who this book is for

This book is for developers, system administrators, security professionals, white-hat hackers, CISOs, and anyone interested in understanding and enhancing their access management infrastructure. While basic knowledge of authentication and IAM is helpful, it is not a prerequisite.

Table of Contents

1. On the Internet, Nobody Knows You're a Dog
2. When to Use Different Types of MFA
3. Preventing 99.9% of Attacks – MFA with Azure AD and Duo
4. Implementing Workforce and Customer Authentication Using Okta
5. Access Management with ForgeRock and Behavioral Biometrics
6. Federated SSO with PingFederate and 1Kosmos
7. MFA and the Cloud – Using MFA with Amazon Web Services
8. Google Cloud Platform and MFA
9. MFA without Commercial Products – Doing it All Yourself with Keycloak
10. Implementing MFA in the Real World
11. The Future of (Multi-Factor) Authentication

Marco Fanti’s career skyrocketed from software engineering to cybersecurity as he discovered his passion for inventing innovative security tools. A prominent figure in the security community, he has collaborated with start-ups such as enCommerce and BehavioSec and giants such as Oracle and Accenture to create products that protect millions worldwide. A lifelong learner, Marco holds two MSc degrees (NYIT and NYU) and an MBA (UF), which enable him to craft bespoke solutions for clients by fusing the best features of various products. Originally from Brazil, Marco lives in Florida with his wife, perpetually exploring the cybersecurity frontier.