{"id":337185,"date":"2017-03-30T21:30:54","date_gmt":"2017-03-30T13:30:54","guid":{"rendered":"http:\/\/techcrunch.com\/?p=1469614"},"modified":"2017-03-30T21:30:54","modified_gmt":"2017-03-30T13:30:54","slug":"onelogin-brings-some-smarts-to-multi-factor-authentication","status":"publish","type":"post","link":"https:\/\/people.utm.my\/asmawisham\/onelogin-brings-some-smarts-to-multi-factor-authentication\/","title":{"rendered":"OneLogin brings some smarts to multi-factor authentication"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/03\/gettyimages-10189535-2.jpg?w=738\" class=\"\"\/><\/p>\n<p>Multi-factor authentication or MFA is designed to protect your identity by forcing you to enter a second independent security\u00a0method\u00a0to determine it\u2019s really you. Yet like every security system, there is a fine-line between usability and safety. That\u2019s why <a target=\"_blank\" href=\"https:\/\/www.onelogin.com\/\">OneLogin<\/a> rolled out a new version of its mobile MFA tool today that uses machine learning to determine your typical usage patterns and only asks you for a second factor when it determines that it\u2019s absolutely necessary.<\/p>\n<p>OneLogin CEO Thomas Pedersen says most MFA algorithms are rather rigid. If you\u2019re on the network at work, you get asked for a password. If you\u2019re not, you get asked for a second factor, but he says, it should be much more subtle than that, understanding how users access the network.<\/p>\n<p>The latest version of <a target=\"_blank\" href=\"https:\/\/www.onelogin.com\/product\/one-time-password\">OneLogin OTP<\/a> is designed to fix that. If you log in regularly from your home on the same laptop, after several times the system will learn that this is a common location and device, and you will be allowed onto the network without a second factor.<\/p>\n<div id=\"attachment_1469622\" class=\"wp-caption aligncenter c4\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1469622\" src=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/03\/screenshot-2017-03-28-07-46-25.png?w=578&#038;h=308\" alt=\"\" width=\"578\" height=\"308\" srcset=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/03\/screenshot-2017-03-28-07-46-25.png?w=578&#038;h=308 578w, https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/03\/screenshot-2017-03-28-07-46-25.png?w=150&#038;h=80 150w, https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/03\/screenshot-2017-03-28-07-46-25.png?w=300&#038;h=160 300w, https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/03\/screenshot-2017-03-28-07-46-25.png 678w\" sizes=\"(max-width: 578px) 100vw, 578px\"\/><\/p>\n<p class=\"wp-caption-text\">Photo: OneLogin<\/p>\n<\/div>\n<p>Pedersen says many users were tiring of pulling out their cell phones to obtain a second form of authentication when they were logging in regularly from the same location. The tool begins to learn what is a high risk and what is not by looking at things like location, device and so forth and assigning a risk score between 1 and 100. This way, the system will only ask for that second factor when the risk is sufficiently high (however the customer defines that).<\/p>\n<p>We have certainly learned the hard way over the last several years, that passwords alone are not sufficient defense against hacking. MFA is a mechanism to ensure that in addition to your\u00a0password that you are really you and not someone pretending to be you. It\u2019s a second (or even third) method that puts a much tougher obstacle\u00a0in front of the hacker with a stolen or guessed password.<\/p>\n<p>Typically, you might be sent a numeric code to your phone via SMS or via an authentication app like OneLogin OTP, which you have to enter to use an application,\u00a0or you might\u00a0have to tap a USB security key like a <a target=\"_blank\" href=\"https:\/\/www.yubico.com\/\">Yubikey<\/a> to get in.<\/p>\n<p>Whatever the second factor, it tends to be a heck of a lot more secure than a simple password. Still, some users were\u00a0finding it\u2019s a bit of a pain to pull out their cell phones every time they need to sign into an enterprise app, and this new tool is designed to remove some of the friction\u00a0of identifying yourself in common situations.<\/p>\n<p><small>Featured Image: : Laurence Dutton\/Getty Images<\/small><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" width=\"680\" height=\"443\" src=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/03\/gettyimages-10189535-2.jpg?w=680\" class=\"attachment-large size-large wp-post-image\" alt=\"Password field on computer screen, detail\" srcset=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/03\/gettyimages-10189535-2.jpg?w=680 680w, https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/03\/gettyimages-10189535-2.jpg?w=1360 1360w, https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/03\/gettyimages-10189535-2.jpg?w=150 150w, https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/03\/gettyimages-10189535-2.jpg?w=300 300w, https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/03\/gettyimages-10189535-2.jpg?w=768 768w\" sizes=\"(max-width: 680px) 100vw, 680px\" \/>&nbsp;Multi-factor authentication or MFA is designed to protect your identity by forcing you to enter a second independent security\u00a0method\u00a0to determine it&#8217;s really you. Yet like every security system, there is a fine-line between usability and safety. That&#8217;s why OneLogin rolled out a new version of its mobile MFA tool today that uses machine learning to determine your typical usage&#8230; <a href=\"https:\/\/techcrunch.com\/2017\/03\/30\/onelogin-brings-some-smarts-to-multi-factor-authentication\/?ncid=rss\">Read More<\/a><\/p>\n<div class=\"feedflare\">\n<a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=1-AcAkYibJ8:fj-Dsxkq68E:2mJPEYqXBVI\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=2mJPEYqXBVI\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=1-AcAkYibJ8:fj-Dsxkq68E:7Q72WNTAKBA\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=7Q72WNTAKBA\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=1-AcAkYibJ8:fj-Dsxkq68E:yIl2AUoC8zA\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=yIl2AUoC8zA\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=1-AcAkYibJ8:fj-Dsxkq68E:-BTjWOF_DHI\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?i=1-AcAkYibJ8:fj-Dsxkq68E:-BTjWOF_DHI\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=1-AcAkYibJ8:fj-Dsxkq68E:D7DqB2pKExk\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?i=1-AcAkYibJ8:fj-Dsxkq68E:D7DqB2pKExk\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=1-AcAkYibJ8:fj-Dsxkq68E:qj6IDK7rITs\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=qj6IDK7rITs\" border=\"0\"><\/img><\/a>\n<\/div>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~r\/Techcrunch\/~4\/1-AcAkYibJ8\" height=\"1\" width=\"1\" alt=\"\"\/> <\/p>\n","protected":false},"author":5817,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[25],"tags":[59,66,26],"class_list":["post-337185","post","type-post","status-publish","format-standard","hentry","category-technology","tag-media","tag-techcrunch","tag-technology"],"_links":{"self":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/337185","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/users\/5817"}],"replies":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/comments?post=337185"}],"version-history":[{"count":0,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/337185\/revisions"}],"wp:attachment":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/media?parent=337185"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/categories?post=337185"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/tags?post=337185"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}