Skip to main content

The importance of using standard authentication protocols

Posted by: admin 14 years, 11 months ago

A theme in my recent talks at various information security conferences has been that you should choose a good authentication protocol and then choose products that support that protocol.  I recommend Radius because it is quite simple and a very standard standard, which is not always the case with IT standards.

 

We constantly get asked: "Does WiKID support VPN product X?"  and the like.  That's the wrong question to ask.  The proper question is:  "I have standardized on Radius/LDAP.  Does WiKID support those authentication protocols?".   The answer is 'yes' (as so do all enterprise-grade two-factor authentication systems).  The benefit is flexibility.  If you use standard protocols, you can easily replace components.  You can start with OpenVPN as your VPN server and upgrade to a Cisco or Checkpoint VPN

concentrator down the road without changing your authentication system (though in that specific case, you would need to change clients, something to think about).

 

Recently a prospect was saying that a competitor had a great plugin for Active Directory that handled authentication and allowed administrators to associate tokens with users in AD.  I pointed out that if they could use the Microsoft Radius plugin for authentication and have both simple user disablement maintain product flexibility.

 

That being said, having an API is important too.  If you have a custom application, using an API might be simpler or add more value than adding a radius or ldap module. The WiKID API, for example, will allow you to create an application that pushes parts of the user administration to a third party, useful for cloud-based services or to allow a vendor to control which of their employees have access to your assets.

Current rating: 1

Recent Posts

Archive

2024
2022
2021
2019
2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008

Categories

Tags

Authors

Feeds

RSS / Atom