A solid security infrastructure is based on the user’s permissions and two-factor authentication. They reduce the risk of insider threats or accidental data breaches and also ensure compliance with regulatory a knockout post requirements.

Two-factor authentication (2FA) requires a user to enter credentials from two distinct categories to log into an account. It could be something the user is familiar with (password, PIN code, security question) or something they own (one-time verification passcode sent to their phone or an authenticator app) or something they’re (fingerprint or face, retinal scan).

Often, 2FA is a subset of Multi-Factor Authentication (MFA) that has more than two. MFA is usually a requirement in certain industries, for example healthcare (because of strict HIPAA regulations), ecommerce and banking. The COVID-19 pandemic has also created a new urgency for companies that require two-factor authentication for remote workers.

Enterprises are living organisms, and their security infrastructures are always evolving. New access points are introduced every day, users are assigned roles, hardware capabilities evolve and complex systems enter the hands of everyday users. It is important to review your two-factor authentication strategy at scheduled intervals to ensure it can keep up with the changes. One way to do that is to use adaptive authentication. This is a type of context authentication that triggers policies based on how the login request is received. Duo offers a centralized administrator dashboard that lets you easily manage and set the policies of these kinds.