1 / 2

How Gluu Failed

Implementations of Duo are providing the first real world experiences on large scale mobile authentication technology and authentication single sign on.

gluu
Download Presentation

How Gluu Failed

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. How Gluu Failed While watching an In Common mailing list discussion around Duo and other forms of strong authentication, it became apparent that we’ve completely failed at educating universities on what the Gluu Server is and how it works. Implementations of Duo are providing the first real world experiences on large scale mobile authentication technology and authentication single sign on. In Gluu’s opinion, Duo is a fantastic mobile 2FA service. We demo it every day to customers. We rely on it internally to secure our UNIX servers via SSH. However, not surprisingly, Duo did not provide the all-in-one credential management nirvana for which many on the list hoped. And it brought attention to many of the challenges institutions will face outsourcing credential management to a SaaS provider. Here is just a sample of some of the list’s feedback: 1. Post-enrollment: management of devices. 2. Credential reset for each authn mechanism. . 3.Delegated Admin.

  2. 4.SAML SSO Admin console 5. Better AD integration Furthermore, some things that were not mentioned but should certainly be considered include trust elevation, adaptive authentication, and special procedures for logout (don’t forget to kill the CAS session…). The thing is… what was being described is the Gluu Server! Despite our best efforts to get the word out about what the Gluu Server does, obviously we failed. The reality we are facing is a tsunami of new authentication mechanisms: mobile, biometric, cognitive, and contextual mechanisms. The situation and the device you have in your hand determine which authentication technology has the best trade-off of price / security / usability. And, as I’ve blogged recently, account reset is the Achilles heel of 2FA. You are only as strong as your weakest reset mechanism. If you are interested in this topic we highly recommend that you join this webinar on Friday, January 31st, or schedule a call with Mike. During the call, you will learn how the Gluu Server supports and provides web access management products interfaces for Duo and other great 2FA technologies via “ox Trust”, our admin console that enables centralized management of authentication and authorization logic for your organization. Article Resource: - http://thegluuserver.wordpress.com/2014/06/03/gluu-oscon-submission/

More Related