SSO/MFA

Multifactor authentication is no longer a standalone solution. Attackers have adapted and the weakest point is increasingly human, not technical.

Identiverse 2025: IAM providers plot authentication without the TSA pat down to deliver ‘fast pass’ to frictionless logins.

Fewer than 4% of enterprise security teams have fully automated their core identity workflows, according to Cerby.

Companies are running more security and collaboration applications, and many pay for "best-of-breed" solutions instead of saving with bundles, Okta's annual survey finds.

Dormant online accounts created by employees at failed companies that used Google SSO can be hijacked by anyone who buys expired domain names, a researcher said at the ShmooCon hacker conference.

Any form of MFA is better than passwords alone, but organizations must implement modern, phishing-resistant forms of MFA to truly improve their security postures.

The UK’s cyber watchdog says that companies need to be more mindful with how they handle their multi-factor authentication.