Access Control (PKI, MFA, SSO)

Passwords as a basic element of authentication are not secure. They are often simple (dictionary attack), predictable, easy to get stolen (malicious code, vulnerability, sticky note on a monitor) and used for multiple services (same password at home, work, bank, etc.).

Multi-factor authentication (MFA) can be a solution:

• I know something (for example: name, password, pin)
• I own something (for example: mobile phone, card, token)
• I am someone (for example: fingerprint, face, eyes, voice)

Increasing trust during authentication adequately reduces the user experience of logging in. To reduce the time spent working with certificates and authentication objects, it is also advisable to introduce the principles of Single Sign-On (SSO).