Organizations can offer their users several authentication methods, ranging from context-based authentication, through SMS, phone tokens or hardware tokens вЂ“ ensuring user acceptance and compliance with corporate security policies.Enforce members to log in to Atlassian products with your identity provider.

End-User Convenience: To ensure security controls are enforced, while streamlining user access, organizations should have the ability to offer users the type of authentication device that most suits their role and security profile.

To ensure users have an optimal experience, administrators need to be equipped with granular controls and comprehensive reporting capabilities.

To meet this charter, they need automation, central management, and visibility into user access across multiple resources. Administrative Controls: Administrators need to be able to manage all users across all devices and resources.Following are several guidelines that can help organizations achieve these goals: Ensure the Solution Reduces IT Administrative and Management OverheadДЄuthentication environments have to offer convenience and transparency for end users and administrators alike. In addition, organizations should deploy security mechanisms to ensure that users accessing network resources from their mobile consumer devices (e.g., tablets, smart phones) are securely authenticated.Д¤. Organizations should implement the same security mechanisms for cloud resources as they would for remote access to the corporate network. Organizations need to ensure that access to all sensitive information is authenticated, whether the information resides on premise or in the cloud. Moreover, they enjoy broad industry support. Unlike proprietary algorithms, standards-based algorithms have gone through public scrutiny by industry and security experts that reduces the chance of any inherent weaknesses or vulnerabilities. Products that are built upon standards-based crypto-algorithms and authentication protocols are preferred. Prefer Solutions That Adhere to Standards-Based Security and Certifications For example, if organizations are interested in implementing additional security solutions that rely on PKI technology, such as full-disk encryption, network logon, and digital signatures, or are thinking about adding such solutions in the future, they should consider CBA, as it enables these applications.Дў. In order to develop a robust authentication solution, organizations should consider their business, users, and risk, and select a solution that provides them with the flexibility to adapt as needed. Context-based Authentication:В Context-based authentication uses contextual information to ascertain whether a userвЂ™s identity is authentic or not, and is recommended as a complement to other strong authentication technologies.ThalesВ delivers certificate-based authentication via USB tokens and smart cards. CBA tokens can also be used to digitally sign transactions and to ensure non-repudiation. Certificate-based Authentication (CBA):В This method ensures authentication using a public and private encryption key that is unique to the authentication device and the person who possesses it.This method ensures authentication by generating a one-time passcode based on the tokenвЂ™s secret. One-Time Passwords (OTP):В OTP technology is based on a shared secret or seed that is stored on the authentication device and the authentication backend.Technologies for multi-factor authentication include: Match Your Authentication Solution to Your Business, Users, and RiskДЄ flexible approach that enables an organization to implement different authentication methods based on different risk levels may ensure a robust system that can be efficiently and cost-effectively deployed. A strong authentication solutionВ that validates the identities of users and computing devices that access the non-public areas of an organizationвЂ™s network is the first step in building a secure and robust information protection system.ДЎ.

User authentication security policy