Using Identity Orchestration to Balance Cost, Security, and Experience
Using Identity Orchestration to Balance Cost, Security, and Experience
Australian businesses with a digital presence find themselves in an interesting position as the year gets underway in earnest. Let’s take a detailed look at the many different pressures your business will be facing followed by how identity orchestration can be the perfect solution to resolve them as smoothly as possible.
The high-profile data breaches that happened towards the end of 2022 are fresh in the minds of many—especially those who are still dealing with the consequences of identity fraud. Depending on specific circumstances, many businesses have either initiated new security initiatives off the back of these breaches or paused inflight projects so they can be right-sized. Either way, there is broad acceptance that securing customer identities must be a higher priority moving forward.
Since those breaches, we've also seen the launch of ChatGPT. While predictions on the significance of this range from "inconsequential" to "revolutionary", it's hard to deny that ChatGPT has raised awareness around the current state of AI and its many implications moving forward. Among these, are the ability to help people achieve outcomes faster and with a lower skill barrier. This could be a boon to businesses under continued cost pressures, but the benefits are also being realised by bad actors who can use AI to write malicious code, circumvent bot detection, and craft more effective phishing emails.
While not strictly digital, there are also recent incidents with alleged spy equipment being shot down over US airspace. These events appear to be the latest in a consistent pattern of behaviour from foreign nation-states and serve as a reminder of ongoing state-sponsored programs to explore and exploit both the physical and digital infrastructures of global governments and private enterprises.
The trend towards digitisation has been underway for a long time now and was massively accelerated by COVID. Many businesses are now observing a partial “snap back” to in-person interactions, but in general, digital-first experiences are more common and even more important than they were in 2019. As such, digital experience continues to be a competitive battleground, with a couple of recent or imminent developments set to shake things up further.
At WWDC last year, Apple announced Passkeys—a passwordless capability that extends existing standards (WebAuthn). Where WebAuthn relies on device-bound biometrics, Passkeys allow biometrics credentials to be synchronised across devices. This capability will also be supported by Microsoft and Google, meaning almost all devices will eventually be passkey enabled. Today, very few apps support passkeys, but as adoption grows it will quickly become an expectation for end users. Expect the shift to passkeys to start in 2023.
In addition to passkeys, you can also expect to hear more and more about ConnectID. ConnectID is an identity exchange offering a simple and secure way for users to prove who they are, using organisations they already trust such as their bank.
ConnectID will allow businesses to provide better experiences via rapid onboarding with minimal data entry. New features may also be enabled via the ability to verify specific data points (e.g. a user's age) with a high level of certainty. As a kicker, ConnectID also allows businesses to minimise the amount of sensitive information they store; a definite plus as they seek to reduce exposure off the back of last year's breaches. ConnectID will be available to Australian businesses sometime in 2023.
Is the economy strong? Are we headed into a recession? Are we talking ourselves into it? Regardless of how you answer those questions, businesses everywhere are tempering the forecast and taking steps to ensure they are set to weather economic conditions.
So how can we improve security, enhance customer experience, and cut costs all at once? That’s where identity orchestration comes in.
Identity orchestration refers to the process of managing and coordinating various identity-related tasks and processes within an organisation. This can include user authentication, authorization, and verification. For PingOne DaVinci, this means an intuitive, low-code development tool that looks like this screenshot:
In short, identity orchestration helps companies:
Provide a cohesive experience
Design, test, and deploy quicker and easier
Improve security posture
These are bold claims, but there is substance to back them up.
If an experience can be built in a web browser, it can be built in a good orchestrator. But while the ability to deliver beautiful experiences is compelling, it’s not unique to orchestration.
The real power comes via the ability to readily integrate multiple systems into a single experience. As much as possible, a good orchestrator will provide ready-to-go, out-of-the-box integrations, but will also have the ability to be extended to bespoke, in-house, or otherwise proprietary systems, often via the use of a configurable REST API connector.
What used to take weeks of developer time, can now be done in days, hours, or even minutes.
The final point to consider regarding experiences is A/B testing. This helps CX teams try new approaches to registration and authentication, quantify the results, and adjust the experience in order to maximise registrations and provide the best possible authentication experience.
A solid identity orchestrator should provide an intuitive, low-code interface that minimises the skills barrier and facilitates rapid iteration. Earlier, I mentioned Passkeys and ConnectID as technologies that will gain traction in 2023. Imagine being able to quickly integrate those into your existing identity infrastructure using out-of-the-box features and established implementation patterns.
Identity orchestration can facilitate this—no need to fund an expensive uplift program or replace existing identity investments.
Improved Security Posture with Orchestration
Identity orchestration can also improve security posture in the following ways:
Centralised Control: Providing a centralised view of identities and access allows organisations to have greater control over who can access what resources. This can help to prevent unauthorised access and reduce the risk of data breaches.
Consistent Policies: Organisations can apply consistent access policies across all systems and applications, regardless of where they are located. This ensures that access is granted only to those who need it.
Strong Authentication: Providing a fast path to implementing MFA, which greatly reduces the risk of account compromise and unauthorised access.
Improved Visibility: Orchestration allows administrators exceptional granularity in logging user events which can be fed into a SIEM, or risk engine.
Conclusion
Regardless of whether you’re more interested in the evolving business landscape or the latest technological innovations, 2023 stands to be a very interesting year. Regardless of what comes, having an identity orchestration strategy stands to help you gain or retain a competitive edge off the back of lower costs, higher agility, and improved security posture. Read more about Ping Identity’s identity orchestration tool PingOne DaVinci then sign up for a free trial to try it for yourself.
Would you like a desktop notification when a new blog is published?
