MFA Everywhere provides turnkey, adaptive Multi-Factor Authentication (MFA) across the enterprise — without impacting productivity                                                                                                             

Centrify, the leader in securing enterprise identities against cyberthreats, today announced MFA Everywhere, a new initiative aimed at securing enterprise identities against today’s most prevalent source of cyber attacks — compromised credentials — without slowing down users. With this announcement Centrify is now delivering one of the industry’s most easy-to-use adaptive MFA solutions that supports all types of enterprise users — including employees, contractors, outsourced IT, partners and customers — across a broad range of enterprise resources — including cloud and on-premises apps, VPNs, network devices, and cloud and on-premises servers.

In the wake of so many high-profile breaches based on stolen or brute-forced password attacks, many businesses have rushed to implement MFA to provide an extra layer of security and mitigate the risk of data breaches. Yet most companies have seen mixed results at best. MFA was either reserved for only the most sensitive or vulnerable accounts, or implemented in standalone silos for specific apps or services due to lack of platform coverage. What’s more, MFA was either “on” or “off”, which resulted in the constant prompting for MFA, and the cumbersome nature of physical tokens annoyed users who were simply trying to get work done.

The Centrify Identity Platform changes this paradigm. A single turnkey platform provides flexible options for authentication factors, for seamless, adaptive MFA across enterprise identities and enterprise assets — without frustrating users. The Centrify Identity Platform supports a broad range of enterprise resources, including thousands of Software-as-a-Service (SaaS) applications, dozens of on-premises applications, hundreds of server operating systems as well as leading VPNs and network devices. Additionally, it supports MFA for privileged command execution and Secure Shell (SSH) access to servers deployed both on-premises and in an Infrastructure-as-a-Service (IaaS) environment.

“Not only do organizations need to implement MFA across all users and resources, they need to do it in a way that doesn’t hinder their users’ ability to work seamlessly and effectively,” said Bill Mann, chief product officer for Centrify. “As attackers get more aggressive and sophisticated, organisations need to get serious about layering on additional factors of authentication for all their enterprise assets. Unlike other vendors that deliver islands of MFA for a subset of users and resources, we are proud to embark and deliver on an expansive MFA Everywhere vision.”

Centrify supports simple, flexible authentication for all types of users.  Whether it’s systems administrators logging on to, or executing privileged commands on servers, or end users accessing cloud, mobile, or on-premises apps, Centrify can bolster security with additional factors including:

• Push notification
• Voice call
• Text message
• Soft token OTP
• Mobile biometric
• OATH-compliant tokens

Centrify also delivers MFA support with robust Smart Card integration. Centrify was one of the first vendors to support CAC and PIV Smart Cards for both Apple’s Mac OS and Red Hat’s Enterprise Linux environments. Centrify was also the first Identity-as-a-Service (IDaaS) vendor to enable Smart Card-based authentication for access to SaaS applications.   Last week at Mobile World Congress, Centrify announced it has implemented derived credentials for secure mobile access to apps, sites and services that require Smart Card authentication.