Access management for remote employees

Organizational IT leaders are most likely face a difficult decision related to allowing their employees to access company systems and information remotely or when working in a remote capacity. They are likely aware of the many benefits, but they have a dilemma: As more employees work outside of the office, how are they able to effectively provide efficient solutions to managing this data.

Solutions have adapted over the years so that employers can better benefit employees who work outside of the office. For example, technology solutions like single sign-on and self-service password reset, were first just for employees who worked in a collective work environment, in an office setting, but now they can now benefit all employees within an organization no matter the location of the employee.

For employees who work outside the company’s network, a single sign-on solution provides a way for employees to log into an “SSO anywhere” solution. This allows users who are not physically connected to the company network and want to use SSO, to log in from home or another location using their Active Directory credentials. In this scenario, users only have to enter a combination of password and user name once. This automatically logs them into all applications and resources across the company network and in the cloud, without the need of logging in again.

In regard to self-service password resets, many types of these solutions now allow users to log in and reset their passwords if needed, from anywhere. They simply choose the “Forgot My Password” button from the company’s log on window or portal and are then able to securely reset their passwords after answering several security questions. No need to burden the internal company helpdesk with calls seeking assistance.

For users on the go who use a laptop that does not have a connection to the company’s network, they click on the “Forgot My Password” button that is provided on the log-in screen. The SSO solution then presents the same questions as the normal self-service password reset procedure (with network connection). After correctly answering the questions, users can then be automatically logged onto the machine. In addition, many self-service reset password solutions also are mobile-friendly for those using their mobile phone, tablet or other device.

So, while remote employees might not enjoy other benefits of working at the office — such as free coffee, in-person camaraderie and copies — they can still benefit from using the company’s solutions.

For more information, please visit our website: www.tools4ever.com .

Wild Ways People Remember Their Passwords, and Why Breaches Are Likely Because of Them

Everyone has done it, used some kind of wild way to remember user names and passwords. Let’s face it, the rules for managing passwords is overwhelming. People are required to remember numerous sets of credentials for all of the systems and applications they need to access their job and personal life, but it’s often too difficult to remember them all.

In addition, passwords often are required to be complex with several different symbols and characters, and they often need to be changed every month or so. Given all of the rules and parameters, how is anyone supposed to keep track, and remember, all of this information on top of all the work they need to complete, PIN codes they need to recall and every other detail that takes up much needed bandwidth?

How do most people remember their passwords? Chances are they keep all of their pass codes in some type of non-secure method to remember them. Given my line of work with clients facing complex password issues, I’ve witnessed many wild ways in which end users use to remember passwords. Frighteningly so, some people even believe that their methods for password “storage” are safe and don’t realize that they are actually putting their organizations at risk.

Though organizational leaders may think that requiring employees to use complex passwords that get changed often is making their network secure, reality is this is often counterintuitive and leads employees to user unsecure methods.

Here are just some of wildest ways I’ve seen people store their passwords:

1. Since employees feel they have to constantly login, many folks keep their credentials in front of them, written on Post-It notes, pasted to their computer screen in plain sight of passersby. That just makes it a lot easier for hackers to gain access to critical information.
2. Some people think that if they hide their passwords, this will keep their information more secure. Many employees, however, actually keep their password sheets in their desk drawer or under their keyboards, falsely assuming no one will just open the drawer or move the keyboard and take a peek.
3. Recently, one of our employees visited the doctor’s office and saw that the receptionist actually had her passwords listed on a recipe card atop the desk next to her monitor in clear view of everyone coming and going. Next to that card were instructions – step by step -- for accessing all of her accounts.
4. Some people even use an invention that they believe is helping them keep their passwords safe: A type of notebook that looks like a phone book allowing them to write down their passwords and organize them. Sure, this is good for organization, but what happens when someone finds the notebook and has access to all of the credentials?

Chances are, many employees in virtually every organization use these methods, but these strategies can cause security risks for any organization. Luckily, though, there are easy ways to stop employees from using such non-secure methods.

One way is with a simple single sign-on solution. An SSO allows employees to create a single set of credentials for all of their systems and applications, eliminating the need to write down passwords or use other non-secure methods for storing their information. Employees simply log in with their credentials and thereafter are authenticated in each of their applications automatically after they are launched.

So, while it may be funny to read how employees remember their passwords, it won’t be funny when your organization faces a security breach because of it.

For more information, please visit our website at www.tools4ever.com