By 2022, Gartner, Inc. predicts that 70% of organisations using biometric authentication for workforce access will implement it via smartphone apps, regardless of the endpoint device being used. In 2018, the figure was fewer than 5%.
“Security and risk management leaders responsible for identity and access management (IAM) and fraud prevention continue to seek approaches for identity corroboration that balance trust and accountability against the total cost of ownership and UX/CX,” said Ant Allan, research vice president at Gartner. “Biometric authentication uses biological or behavioural traits unique to each person and offers better UX/CX and accountability than other common methods. Implementing this via smartphone apps provides more consistency in UX/CX and is technically simpler than supporting it directly on a variety of different endpoint devices.”
Buyer beware
Gartner warned midsize and large organisations to be cautious as biometric approaches that can be readily supported on any smartphone are vulnerable to presentation attacks or “spoofing” using photos, videos, voice recordings, and so on. According to Gartner, presentation attack detection or “liveness testing” is essential.
The top 10 strategic technology trends for 2019, according to Gartner
https://www.youtube.com/watch?v=nRTRyfIDp4k
SaaS-delivered information and access (IAM) management growing too
By 2022, Gartner predicts that 40% of midsize and large organisations, globally, will use IAM capabilities via software as a service (SaaS) offerings – up 5% in 2018.
SaaS-delivered IAM is often deployed to enhance access management software implementations. The ease of deployment and rapid time to value of SaaS-delivered IAM offerings have proved valuable to organisations that favour SaaS adoption and do not consider the operational management of IAM functionality core to their business.
“Based on our client interactions, most SaaS-delivered IAM purchases are for access management and lightweight identity governance and administration functionality, such as single sign-on. These offerings provide excellent connectivity and include solid access management and password management features,” said Abhyuday Data, associate research principal analyst at Gartner.“B2B and B2C are the most established use cases with matured access management capabilities.”
How can business introduce a multi-cloud strategy into their operations?
The significant move by organisations to cloud architectures is also influencing this trend.
“Organisations looking to use SaaS-delivered IAM should first ensure they have established satisfactory and well-supported traditional IAM software stacks. They then need to consider SaaS-delivered IAM once functional needs are met and the organisational benefits are realised,” concluded Data.
Gartner clients can read more in the report, “Predicts 2019: Identity and Access Management.” Privacy and access management issues will be further discussed at the Gartner Identity & Access Management Summit 2019, taking place 7-8 March in London.
Gartner identifies 6 barriers to becoming a digital business