What has been your biggest difficulty when it comes to implementing MFA?

Identity & Access Management (IAM)

Takes too long, users don’t like it27%

Too hard for users to figure out43%

The authenticator we like doesn’t integrate with enough programs19%

No reporting functionality6%

Not enough factors as options3%

206 PARTICIPANTS
1.8k viewscircle icon2 Comments
Sort by:
Director of IT in IT Services2 years ago

User resistance to adopting MFA protocols is the biggest problem.. then integration issues with existing environment.

IT Manager in Construction2 years ago

I believe it is missing an important entry: how to.
It the organization doesn't provide a mobile phone or you can't assign a device for the MFA the users should follow the BYOD and that's not easy

Content you might like

How often do you asses your IAM infrastructure?

Every Month19%

Every Quarter58%

Every Year20%

Other (comment below)2%

View Results

Curious how people are dealing with fraud, and specifically tech support scams, in their organisation. Our service desk have a protocol (using personal questions and answers or escalation to a manager) when validating staff requesting password resets. This wouldn't be scalable to our wider population.  I've heard of one tech firm implementing something simple like 2 random words generated on an internally hosted website every, say, 60s that can be used as a challenge & response. Does anyone have any other smart, easy to use, bits of tech that I should consider as part of a wider on-going education and awareness campaign?  I'm assuming this is a hot topic for many of you, given the recent Quick Assist social engineering ransomware attacks.

What's a greater concern for returning to the office? Comment how you are prioritizing...

Human Factors (fears, mental health, physical spacing)85%

Technical / IT Factors (on-premise tools, pivoting back away from remote)14%

We're mandated to allocate IT costs to the service level, but this creates friction with Identity & Access Management (IAM). The issue: non-negotiable security costs (MFA, SSO, governance) often exceed the cost of low-value services they protect (e.g., internal portals), leading to business owner pushback. How have you addressed this "Low-Value Service Paradox"? Do you keep foundational SSO/basic provisioning as corporate overhead or allocate everything? Do you use risk- or value-weighted allocation to subsidize essential, low-cost services? Who owns the final decision on allocation formulas—Finance, CIO Council, or Security? Please share specific solutions and governance models that have made IAM cost allocation fair and sustainable.

Read More Comments

Can anyone share how they have partnered with HR to prevent shadow agents from accessing HR data outside of sanctioned AI platforms/tools?

What has been your biggest difficulty when it comes to implementing MFA? | Gartner Peer Community