What do you think are the most important factors to consider when picking an MFA solution?

313 viewscircle icon1 Upvotecircle icon5 Comments
Sort by:
Chief Information Security Officer in Healthcare and Biotech2 years ago

1. Usability and User Experience
2. Integration Capabilities
3. Scalability and Flexibility
4. Management and Administration
5. Reliability and Availability
6. Cost and Total Cost of Ownership
7. Compliance and Industry Standards
8. Vendor Support and Reputation

Global Head of AI, Data & Analytics in Software2 years ago

Session length, ease of use and unlikely for an accidental acceptance (not just a yes or no pop-up, put in a number)

Senior Information Security Manager in Software2 years ago

Realize that, as Roger Grimes writes in ‘Hacking Multifactor Authentication’, that every MFA solution can be hacked. They are far from bulletproof. And it is critical that they be configured correctly.

https://amzn.to/46k5VGv

 

CEO2 years ago

I would look for tools that are phishing resistant - MFA is frequently bypassed by session lengths that are too long. I would evaluate tools that are FIDO 2 aligned. 

Lightbulb on1
Director of IT in Healthcare and Biotech2 years ago

Having been on both the end of using a company MFA and also putting in one:
* compatibility with existing solution(s)
* secure
* multiple device options for users, a few % will not have smartphones. 
* transparent vendor (esp. in relation to security issues)
* ease to use

Other considerations:
* SaaS based
* Part of greater SSO/directory solution
* ease of integration and troubleshooting

Lightbulb on1