Learn · CERN

Talk10 min

A Unified approach towards Multi-factor Authentication(MFA)

Masood Zaran · CERN

Watch At CERN

About

With more applications and services deployed in BNL SDCC that rely on authentication services, adoption of Multi-factor Authentication (MFA) became inevitable. While web applications can be protected by Keycloak (a open source Single sign-on solution directed by Red Hat) with its MFA feature, other service components within the facility rely on FreeIPA (an open source identity management software directed by Red Hat) for MFA authentication. While this satisfies cyber security requirements, it creates a situation where users need to manage multiple tokens and differentiation of them depends upon what they access. Not only this is a major irritation for users, it also adds a burden for staff members who manage user tokens. To tackle the challenges, a solution needs to be found to provide a unified way for token management. In the paper, we elaborate a solution that was explored and implemented at the SDCC, and also plan to extend it's capabilities and flexibility's for future application integration's..

0:00:00 Slide 1

0:00:56 Slide 2

0:01:51 Slide 3

0:02:46 Slide 4

0:03:41 Slide 5

0:04:36 Slide 6

0:05:31 Slide 7

0:06:26 Slide 8

0:07:21 Slide 9

0:08:16 Slide 10

0:09:12 Slide 11

The talk

  1. A Unified approach towards Multi-factor Authentication(MFA) 2021-05-20 · 10 min · CERN's player

Credits and licence

Institution
CERN
Department
Conferences
Speaker
Masood Zaran
Year
2021
Language
English
Subjects
Physics, Computer science, Earth and environment
Source
CERN
Licence
CERN, as CERN states it. CERN's terms
Attribution
© CERN. CERN provides its audiovisual media free of charge for educational and informational use, credited to CERN; this lecture is shown in CERN's own player.
Who can watch
CERN gives no rating. Invisible Network shows it to Tweens profiles and older, judged from what the source says about it. How courses are placed