Think beyond Active Directory for hybrid working

In 2020, the pandemic had a major impact on security and cyberattacks. The year saw the highest number of data breaches and cyberattacks in decades. In India alone, more than 1.1 million cyberattacks were reported in 2020, almost three times the number reported in 2019.

The new norm of work-from-home, paired with the Great Resignation, made cybersecurity even more challenging for enterprises. There was a steep increase in staff turnover and that came with access and privilege requests – all to be administered remotely.

On-prem IAM solution

The traditional, on-premises model for cybersecurity was to implement a solution like Active Directory (AD). This identity and access management solution helped to regulate device and user authorization through password policies and account privilege policies.

Many organizations (approximately 90% of the Global Fortune 1000 companies, says Frost & Sullivan) for identity and access management. Active Directory works on the enterprise network to manage the organization’s devices based on company policies for software and content access, password creation and maintenance, and other security requirements.

It pushes these enterprise policies securely to all network devices. It offers several advantages, primarily control and fast access to information. However, implementation of AD infrastructure in an organization requires proper planning and investment, and that can prove expensive depending on how many systems are being managed. AD depends on the office network and is located in the server room on the office premises.

Working remotely with AD

When using an on-prem IAM solution like Active Directory (AD), users sign on to the single AD portal to access their data and applications. The only way to sign on to AD is via the organization network.

During the pandemic, enterprises suddenly moved to remote working – rendering the on-prem solution useless. Suddenly, users needed to log on to their network from a remote location, through a VPN. The investment in multiple VPN licenses would result in a huge expense, while free or open-source VPNs could lead to security vulnerabilities themselves! This also created an additional step in the log-in/access process.

In addition, since the AD infrastructure depends on the office network and is entirely located in the company’s server rooms, it requires on-premises monitoring and maintenance by at least two trained technicians.

Azure AD

Microsoft understood that these problems could be faced by pandemic-stricken users of AD, and recommends that in such cases, Azure AD (the cloud version of Active Directory) may be used. However, Azure AD is associated with high initial CAPEX and ongoing maintenance costs and requires training for the technicians to be able to manage it.

These expenses are hard to justify, for businesses that had already invested in AD – typically, AD costs a significant amount of time and money. Some small and medium businesses simply could not afford the fresh costs, and instead looked for workarounds that potentially resulted in new vulnerabilities.

So are your only options expense, operational difficulties, or potentially vulnerable workarounds?

Opt for customized IDaaS

With a custom IDaaS (Identity as a service) solution, you gain the flexibility and usability of Azure AD, at a cost that suits your needs. Service providers like Akku offer complete automation of the identity and access management function, on any device accessing enterprise assets, from anywhere.

On-prem is old-school; the future is the cloud. Consider a cloud-native IAM solution like Akku, that’s completely customizable to your requirements. It’s more cost-effective and hassle-free. Contact our team to learn more.

The Goldilocks Zone of Content Restriction: Not too wide, not too narrow, but just right

Do you need to restrict content for your employees? Or can you allow them complete and free access to the worldwide web? There’s simply too much information out there, which can result in distraction and lowered productivity. At the same time, too many restrictions can make your team feel suffocated!

It’s important to strike a balance between allowing your team to access the information they need or may need, and keeping your company’s reputation clean by blocking illicit, illegal or unnecessary material. 

Here’s a quick ready reckoner to help you plan your company’s content restriction strategy.

What content do you really need?

Let’s say your organization works in the e-learning space. Your team will need to use the internet to better understand some of the content inputs that they’ve received from their client. They’ll need to watch YouTube videos on how to create specific interactive elements. They may need to read technical papers on gamification and game-based learning, in order to stay updated and create content that will make an impact. They’ll also need to refer to material created by competitors, including promotional material put up by them on social media, to position the client’s product in the available learning gaps. These are essential content categories that the employee must be able to access.

The Goldilocks Zone of Content Restriction: Not too wide, not too narrow, but just right

What content might you need?

Many employees find that they are more effective if they work while listening to music. For their safety, it’s important to allow them access to the news and local weather updates. You could consider a midway solution by allowing access to audio-only music options, and restricting access to reputed news sites alone – and the amount of time that employees can spend on the site.

Perhaps the most controversial content category is viral social media. Would it help your team to be able to include the latest viral moment in the e-learning content, to keep it relevant and topical? If so, how do you allow access to viral content without losing employee productivity? Can you put a time cap on certain applications or websites? 

 

What content do you definitely NOT need?

Access to personal email is a security risk as much as a productivity issue. 

Entertainment content can waste a great deal of time and company bandwidth. 

Illegal or illicit material found on official systems and networks can also impact your company’s reputation.

 

Can this be controlled by blacklisting certain URLs?

No, unfortunately not! 

A lot of the video content your employees may need is on YouTube. So is a lot of the content that they don’t! Similarly, personal email may be accessed through the same URL as professional email. 

Not to mention that blacklisting thousands – or even millions – of URLs is simply impractical. A more refined solution is required.

 

Whitelisting specific content categories

The kinds of content that you want to allow your team to access depends on the kind of work your company does. Each category of employee will also need different kinds of content access. 

Open source content categorizations for websites and video streaming portals are available online. It is possible to restrict access to content – whether on YouTube or on the internet at large – based on this categorization.

This makes for a much more relevant form of content access control, with necessary content types remaining accessible while irrelevant content is blocked. This helps to save company bandwidth and unproductive employee time.

 

Wondering how to create content restrictions for your business? Allow our experts to help you. You can set up personalized content filters with Akku, a 100% customizable IAM.

 

Data Logging and Audit: The IAM advantage

One of the key functions of an effective Identity and Access Management (IAM) solution is data logging, to capture and store information about which users access what applications, and when. These logs can help to drive effective decision-making through auditing in three key areas – financial, security, and compliance. Here’s how.

Financial audits

Optimization of software licensing is an area where your IAM can play a role in financial auditing. 

Through the logs maintained by your IAM, it is possible to extract actionable insights on the actual usage of software licenses that your organization owns, and therefore the number of users actively using each application, and whether there is very low usage of certain applications.

This makes optimization possible by reducing the number of licenses for specific applications if they are in excess, and by dropping or retiring applications that are not being used.

It is important to note that most IAMs will only capture the base data that would feed such audits and analysis, and generally would not provide these insights within the platform. However, if you are working with a highly flexible IAM, such customizations should be possible to implement.

Security audits

Logging user actions can help companies improve security as it is a way for administrators to detect breaches early, and also analyze and provide verifiable evidence of the source of breaches.

An effective IAM solution would maintain detailed logs monitoring all access and activity on the organization’s apps, ensuring that there is no unaccounted access. This provides complete visibility into which users have accessed which applications, and when.

Security auditing verifies whether all documented protocols are being followed and assists in preventing and tracking down malicious activity. To maximize the security benefits of audit logging, logs should be reviewed regularly and often enough to detect security incidents.

Compliance audits

Compliance audits help to ensure the efficiency of compliance programs, to ensure that your organization achieves and maintains certifications and recognized standards, in turn leading to improved customer loyalty and satisfaction.

Your IAM can help to provide verifiable evidence of compliance with security, data protection, and privacy standards and laws. This is achieved through features such as multi-factor authentication and enforcement of strong password policies. Similarly, prompt deprovisioning of user accounts through a single sign-on (SSO) functionality, and dissemination of mandatory employee communications through the common platform of the IAM go a long way towards complying with statutory standards.

Compliance logs are also useful when it comes to following General Data Protection Regulation such as respecting employees’ right to be forgotten.

Are you making the most of the logs captured by your IAM to manage financial, security, and compliance audits at your organization? Unlock the value of your data, and take it even further with customized reporting and dashboards with a highly flexible IAM solution like Akku.

Flexible Identity: IAM solutions need to bend… a little at least!

In the world of Identity and Access Management (IAM), flexibility is the key to stability. While IAMs are not new, the threats that they are helping to protect against and the environment in which they are operating are constantly evolving. Adaptability is more critical than ever.

Negotiating this ever-transforming environment, enterprises need both flexibility and fit in terms of their identity and access management strategy. This means finding an ideal IAM solution that adapts and grows with your business, customers, workforce, tools, processes, and market trends. Your IAM needs to balance user-friendliness and security, or users tend to get frustrated and search for workarounds that can open up security vulnerabilities.

Rushing into a decision about your IAM without a fully-formed strategy can result in a solution that is so rigid it doesn’t solve your problems! An inflexible IAM that does not support your identity and access management needs, can negatively impact user experience and decrease productivity. Technology should enhance security goals, not compromise them. Opt for a flexible IAM solution.

What do we mean by flexibility? It is the ability to use the IAM in the way that you want, without being constrained by its own features.

Flexibility in authentication methods

A flexible IAM offers a wide range of strong and centralized authentication mechanisms that cover cloud and mobile assets, permitting you to set password policies with multiple multifactor authentication (MFA) options. Modern MFA solutions provide users with multiple options depending on the circumstances (for instance, a hard OTP token may be used when working offline). This ensures that while security is the priority, productivity is not compromised.

Flexibility in integration

Your identity provider (IdP) must integrate with your IAM. Identity providers, such as Azure AD, are third-party service providers that store and manage digital identities. Choose the IAM that integrates seamlessly with your IdP, and which integrates with and provides access to a large list of cloud, on-prem, SaaS, licensed, and custom apps. This gives you the flexibility to use any IdP and app, based on the merits, without being tied down by your IAM.

Flexibility in access management

A flexible IAM allows you to define proper access privileges and set custom device restriction rules, in order to balance security with usability. A central directory, for instance, can help to manage access rights by automatically matching employee job titles to locations and relevant privilege levels. Further, a flexible IAM system can be used to establish groups with privileges for specific roles thereby uniformly and securely assigning access rights. By making it easy to define access privileges, your IAM becomes more flexible and user-friendly.

Customization

With IAM solutions, one size does not fit all. Look for a solution that allows you to customize everything from number of users to MFA options to report customization and content restriction. The more you customize the IAM to suit your needs, the better the digital experience your company can provide to its workforce – and the greater the impact on the business and the bottom-line.

Akku is a cloud-based powerful identity and access management solution that is designed with SME/MMEs in mind and their ever-changing needs. Contact us today for a consultation.

Authentication, Authorization, Auditing: the Three Pillars of IAM

In an earlier article, we explored the 3 pillars of a Cloud Access Security Broker (CASB), with Identity and Access Management (IAM) being one of these pillars. In this blog, we dive deeper into IAM, and the key concepts on which it is built.

2021 saw the average cost of a data breach rising from US$3.86 million to US$4.24 million on an annual basis, according to the IBM Cost of a Data Breach Report 2021.

Data breaches are increasing. And your Identity and Access Management solution, or IAM, is your first line of defense. IAM secures, measures, monitors, and improves the security of access through a standardized process.

How does an IAM improve security? It offers three pillars of support: Authentication, Authorization, and Auditing.

Authentication

How do you map the correct users to gain access to the correct content, at the correct times? 

Authentication takes place whenever a user attempts to access the organization’s network or assets. Verified credentials serve as a passport that allows users to access data, systems, applications, and resources.

With data breaches becoming more common, user authentication is vital to security. Organizations are prioritizing advanced security through sophisticated additional authentication methods. For instance, your IAM would secure your access management with two-factor or multi-factor authentication by pairing a username and password with a key card or OTP token, a fingerprint, or facial recognition. Every user has unique credentials, and IAM authenticates the user data to confirm that the user is a member of the organization.

Using a strong password policy can also improve authentication security. Verifying whether your IAM allows you to configure and customize your password policy is essential in providing a comprehensive authentication process. 

Authorization

While authentication verifies the users’ identity, the authorization aspect of IAM is what grants the user access to data based on their identity and defined access rules. While the two are related, they are not interchangeable.

In a sense, authorization is the second step to authentication – think of a night club, where the bouncer allows you entry after checking your ticket stamp (authentication), following which another staffer inside decides if your stamp allows you access to every area of the club or restricts you to select areas (authorization).

In organizations, users are granted authorizations according to their roles. Proper authorization is important to prevent data breaches.

For secure authorization, follow the zero trust principle and provide minimum possible access to each active user and immediately deprovision ex-employees. These two steps ensure that the risk of data breaches caused by improper authorization or disgruntled employees is reduced.

Auditing

Auditing security configurations helps weed out redundancies within the IAM system, such as IAM users, roles, and policies that are not required, and make sure that all users are authorized and authenticated. It also helps secure the system by regularly monitoring who has access to critical enterprise assets.

Audits ensure that compliance requirements are met, incidents are responded to and taken care of within a defined period of time, procedures are streamlined, responsibilities are segregated, transparency and documentation are maintained. 

Audits can also help to understand employee or user contributions on a particular app or data sheet. This can also be used in version control. Knowing who last logged on to the document gives usable information in cases where data has been breached. 

Chinks in authentication, authorization, or auditing can result in a compromised system. Opt for a trusted IAM solution such as Akku, a major emerging player in the APAC region. Akku offers a plethora of customizable options to improve data security, standards compliance, efficiency, and productivity.

 

Passwordless Authentication 101: What it is, How you can adopt it, and Why it’s the future

To stick with passwords or to go passwordless is a million-dollar cyber security question. Resetting, remembering, and changing passwords regularly is not only frustrating but puts critical information at risk. But at the same time, have we reached a point where we can realistically remove passwords entirely from our authentication processes?

The drawbacks of passwords

Strong passwords are difficult to remember, and weak passwords are too easy to hack. Additionally, overuse of the same passwords across multiple platforms can result in breaches during credential stuffing attacks.

According to a report from LastPass, weekly time spent managing users’ passwords and login information has increased 25% since 2019. The report also says that 85% of employees agree that their organization should reduce the number of passwords required to be used daily. And according to Verizon data, 81% of data breaches involve weak, default, or stolen passwords.

What is Passwordless Authentication?

Passwordless authentication is user-friendly and secure and brings to the table reduced IT costs by eliminating password-related risks, increased productivity as employees save time remembering or updating passwords, and stronger security. In short, passwordless authentication is both convenient and secure.

Passwordless authentication relies on the same principles as digital certificates, on public and private keys. Think of the public key as the padlock and the private key as the key that unlocks it. With digital certificates, there is only one key for the padlock and only one padlock for the key. For passwordless authentication, a cryptographic key pairs with a private and a public key. A user wishing to create a secure account uses a mobile app to generate a public-private key pair, where the public key is provided to the system, and the private key is accessed from the user’s local device using an authentication factor such as an OTP. 

Here are some ways you can go passwordless

  • Single Sign-on or SSO
    It simplifies managing access and provides employees an easy and secure way to log in. Also, it allows IT to provision or deprovision access as needed. However, while SSO reduces the number of passwords required, it often demands a single password to access all applications.
  • Biometrics
    Fingerprints, face, iris, voice, and other biometric parameters are used as they are considered more challenging to hack than alphanumeric codes. They are also convenient to use, as they cannot be misplaced, stolen or forgotten.
  • Hard tokens
    They allow access to software after verification with a physical device.
  • OTPs
    Users are asked to input the code sent to them via email or SMS. OTPs provide an additional layer to security and are more secure than static passwords. OTPs are often used as a second layer of authentication, but can even replace static passwords.
  • Private keys
    An alphanumeric string is processed through an algorithm, to encrypt or decrypt data.
  • Magic Links
    Users enter their email address in a form, and then an email is sent with a login link.
  • Push Notifications
    Users receive a push notification on their mobile devices through a dedicated authenticator app for identity verification.

Passwordless authentication methods are compatible across most devices and systems. Plus, they’re virtually impervious to phishing and other common cyberattacks.

So, is passwordless authentication the future?

Passwordless methods offer both a more secure and a more convenient way to authenticate users. So the simple answer is, yes, they are the future.

However, considering how ubiquitous passwords are today, they certainly aren’t going to disappear overnight. So until passwordless methods gain in popularity, it’s important to continue to do all you can to ensure strong passwords to secure your applications and data.

Whether you are ready to take the leap to passwordless, or are looking for a way to make your password based authentication more secure, Akku can help you enhance security and productivity across your environment. Talk to us today to see how we can help.

 

How to select your IAM service provider

Given the increasing number of cyber-attacks, greater adoption of Cloud Services, and swelling mobile workforce, it’s little wonder that IAM has been gaining recognition as a key technology platform at the forefront of the digital world. 

At the same time, IAM is almost never one-size-fits-all, and so choosing the right solution provider is important. Your IAM needs to work at scale, efficiently, and seamlessly. It also needs to be cyber-attack-proof as well as future-proof.

There are several IAM providers in the market, with more continuing to enter the fray. And why not, considering the global identity and access management (IAM) market size is projected to reach USD 24.76 billion by 2026.

So, how do you know which identity and access management solution is right for your organization? Here are some important factors to consider…

Credentials

What you need is a proven solution, one that can scale and perform. At the same time, if you are not a large enterprise yourself, the large enterprise IAM platforms on the market may prove to be financially unviable.

There are IAM platforms that offer most of the same functionalities at SME-friendly costs. To evaluate these solutions, get information on the following factors to see if you are on the right track:

  • Customer references or testimonials
  • Age of the business. How long has your vendor been around?
  • Any data they may have on product testing, performance tests, security tests, and so on
  • Policy controls regarding data access governance, adaptive authentication, and so on
  • Number of similar projects done as well as case studies. You need to align with an IAM vendor that shares your direction

Identifying an established and well-regarded smaller service provider can be a great way to build the capabilities you need without breaking the bank.

Technical expertise

Deploying an IAM solution is rarely a simple plug and play process. Today, most organizations – whether large enterprises or SMEs – use a range of applications, both cloud-based and on-premise. Integration and deployment support therefore need to be key factors in your selection process. While you yourself may not be fully technically aware, here are some questions you need to ask:

  • Does the IAM’s SSO support all of your current and planned apps? Does it come with pre-built connectors for SaaS applications? Also ask about integration kits, token translation capabilities, and support for a range of industry standards.
  • How does your vendor plan to monitor, track, delegate, revoke, suspend or integrate access across applications?
  • Does your vendor have on-prem deployment options while offering flexibility to sync data from heterogeneous data?
  • What approach does your vendor use to handle the migration from a legacy system?
  • What multi-factor authentication options are supported and can they be accessed via APIs, SDKs, or both? Ask about the types of MFA supported — use of mobile devices, push notifications, SMS, and so on. The MFA options need to balance security and user experience.
  • What range of authorization and access policy controls does it provide?

And finally, are you and the vendor the right fit?

You must align with an IAM vendor that shares your direction. Particularly as a small or mid-sized business partnering with a small or niche vendor, you need to both share the same roadmap so that the journey together is smooth. 

Also, before you select a vendor, ask yourself how much technical help you require – do you possess enough internal technical capabilities to deploy an IAM solution on your own? What about post-deployment tech support?

Here are more questions to have answered so you are the right fit. 

  • How customizable is the solution? Can it meet your tech needs today and tomorrow?
  • Is the authentication policy adaptable? It needs to be because a one-size-fits-all authentication can hinder user productivity, experience, and so on. A customized solution is what you are looking for.
  • Are the authentication policies adaptive and scalable? (Do read our previous article on Alternatives to Okta for more)
  • What plans does your vendor have for large-scale deployments and product performance? How are they adapting to emerging standards considering the industry is evolving rapidly?
  • Most importantly, does the IAM vendor’s long-term strategy align with your objectives?

Akku specializes in creating solutions tailor-made for the needs of small and medium-sized businesses. Call us today if you want IAM solutions that best fit your enterprise needs.

Transitioning from a legacy IAM to an interwoven Identity Fabric

With the emergence of cloud apps, identities need to be managed outside the traditional network. This has introduced new security concerns, on account of the many user identities and passwords that administrators have to manage.

IT security systems, which used to be bifurcated between securing what is “inside” the network and what’s “outside”, have been transformed into a consolidated portfolio of services that enable users to connect to anything and anyone, anywhere and at any time, while being secure, scalable and controlled.

It is therefore imperative for Identity and Access Management (IAM) solutions to evolve continuously and seamlessly, to expedite the process of adapting to business in the digital era.

This is where the concept of the Identity Fabric comes in. It sews together a gradual, non-disruptive integration and migration of identity and access management.

As secure digital identities are at the core of any digital transformation, identity fabric is the way forward for a future-proof metamorphosis.

What is identity fabric?

Identity Fabric is a deployment approach that helps to continually and quickly update enterprise architectures for IAM. It is the infrastructure that enterprise IAMs use to enable access for all across multiple elements and domains, without redundant user administration.

Identity fabric is the interwoven linking of identity online, providing seamless and controlled access for everyone to every service as long as they are authorized. They are not a single technology, tool, or cloud service, but the digital identity backend that delivers all the identity services in a standardized manner and integrates with legacy IAM. It is a secure and adaptive system that manages identities and access rights.

Identity fabrics use APIs to integrate with different systems and deliver a comprehensive set of services from Directory Services to Identity Lifecycle Management, Access Management Services, to Access Governance.

The identity fabric architecture

Identity fabric architectures are designed to provide identity services that can be consumed by digital services in hybrid environments (spread across a mix of on-premises, cloud, serverless, and Internet of Things) through homogenized protocols.

Identity fabrics help to avoid siloed approaches, facilitating compliance to legal and regulatory requirements to manage personally identifiable information and corporate access to resources.

Several different but overlapping APIs make up the building blocks of the identity fabric, as it puts API capabilities at the center.

While it is recommended to design the identity fabric to use the least possible number of APIs and other components, there is likely to be a large number of components one needs to migrate as a large number of solutions fall under the IAM umbrella.

As they offer a multi-pronged approach to IAM, businesses need to gradually migrate and integrate legacy IAM services and existing apps into the identity fabric, while simultaneously building new digital services.

As companies continue to modernize identity and access management, multiple products must be integrated to deliver a holistic access management solution that works for cloud and on-premise needs. CloudNow offers tailored enterprise identity and access management solutions that work for you. Reach out to us for more information and to get started.

What is CASB? How has data security changed with the cloud?

A Cloud Access Security Broker (CASB) is an on-premises or cloud-based security policy point-of-enforcement. Originally, asset security was simpler since all assets were located on-premises and on the same network, but with time and with an increasingly mobile workforce, security requirements evolved and CASB rose to meet them.

A CASB offers an integrated security management solution to security enforcement such as multi-factor authentication, single sign-on, credential mapping, encryption, tokenization, malware detection, and so on.

What is CASB and how it works?

CASB, a policy enforcement center, consolidates security regardless of device, including unmanaged smartphones or personal laptops. It works through a three-step process that involves Discovery (to compile a list of all third-cloud services and users), Classification (of risk levels of each application), and Remediation (to set security requirements and take action in case of a violation).

A CASB comprises three pillars.

1. Identity and Access Management (IAM)

Gartner defines IAM simply as ‘the discipline that enables the right individuals to access the right resources at the right times for the right reasons.’ IAM solutions help maintain a database of all organization identities and restrict access to org assets based on user identity.

2. Identity Governance and Administration (IGA)

This is a policy-based approach to IAM. IGA serves to support overall IT security and regulatory compliance as well as automate workflows for provisioning and deprovisioning users.

And yes, there is a difference between IAM and IGA. IGA allows organizations to not only define and enforce IAM policy but also connect IAM functions to meet audit and compliance requirements.

3. Privileged access management (PAM)

This is a critical security control that enables organizations to simplify how they define, monitor, and manage privileged access across their IT systems, applications, and infrastructure. It helps control who has access to sensitive systems and protected information. Most employees, for instance, shouldn’t be given access to all critical systems such as production, backup, and financial at the same time.

Privileged accounts can access valuable data and perform special actions, often with low tracking or control. PAM solutions centralize the management of administrator profiles and enforce a least privilege access policy.

To better understand what the CASB concept really means, and how you can adopt it as you secure your SaaS, PaaS, or IaaS environments, contact Akku today.

What are some alternatives to Okta?

In this new world of remote working and cloud enterprises, Identity and Access Management (IAM) has been thrust to the fore. It’s almost as if the economy now relies on agile and automated IAM systems to enable rapid and seamless digital transformation.

Okta is the leading player in the area of IAM, and has made major strides forward in the field by harnessing artificial intelligence, and thus going beyond merely using the password and other multi-factor authentication options.

Okta has several advantages such as its security, scalability, and simplicity. But cost-wise, Okta works better for larger enterprises and can prove to be quite expensive for smaller organizations.

Though Okta is a popular choice, that doesn’t mean it is your only option. There are several other options out there for enterprises looking to go the IAM way, each with its own advantages. 

Some of these alternatives include Active Directory Federation Services (ADFS), OneLogin, and Akku for instance and we’re going to give you the lowdown on each of them.

1. Active Directory Federation Services (ADFS)

Developed by Microsoft, ADFS is a Single Sign-On (SSO) solution and is a component of Windows Server operating systems.

ADFS is preferred by many enterprises as it is perceived to be more stringent on privacy issues when compared to other tech majors; and more convenient as most enterprises use Windows Active Directory (AD) for user management already, meaning there is no environment change if you are adding on ADFS.

But like with Okta, initial costs are high, and there are hidden infrastructure and maintenance costs as well. For instance, commissioning ADFS requires a Windows Server license, which comes at a cost. 

Also, ADFS tends to be complex and needs substantial technical know-how to use properly. Commissioning, configuring, and maintaining an ADFS solution is time-consuming and customer support too, though free, is not very user-friendly. 

2. OneLogin

OneLogin, another market leader, brings to the table secure, one-click access, through all device types. Advantages are that OneLogin comes pre-integrated with over 4000 apps, offers multiple language options, and integrates with popular directories such as Active Directory (AD) and G Suite, thereby offering flexibility for growing businesses. 

But like with Okta and ADFS, here too, pricing can be steep for smaller enterprises. It is also complex to use and though it integrates with AD, it offers limited analytics on the admin console, user support time is not ideal, and adding new apps can be tricky.

3. Akku

Akku (yes, that’s us) is an emerging player in the Asia Pacific region. While it comes with all IAM features, it has been developed specifically keeping the needs of small and medium sized businesses in mind. It is therefore ideal for teams of 10-300 people and companies looking for high ROI and responsive support. 

So, if you are a smaller enterprise, a fast-growing start-up, or a business in any industry where value for money is an important consideration, Akku presents a sensible option. Another advantage here would be that it provides enterprises with complete control over data access and privacy on the cloud while staying compliant with statutory standards.

Akku isn’t a one size fits all option and because of the bespoke nature of the solution, it takes more time than Okta to purchase and set up. But once you are all set up, it is simple to use, and offers all the IAM functionalities you will need at a fraction of the cost of the other options listed here.

So, there are options out there for IAM beyond Okta. And while a strong IAM strategy is integral to productivity and security, you’ve got to choose one that fits your requirements and your budget. If you are a small or medium-sized business looking for an IAM solution, with an eye on customization, contact Akku today.