12.18.2017 - Keeper Security Patches Password Protection Flaw Reported by Google

Optimal IdM provides a few best practices to keep passwords safe including this quote on multi-factor authentication (MFA). “2FA does a good job of allowing only individual account owners access to their login credentials,” Bohren said. “If hackers do succeed in guessing a password, they must still breach additional authentication steps before they can reach important data.” ...

12.12.2017 - Optimal IdM Chief Software Engineer Jeff Bohren to Present at InfoSec World 2018

Optimal IdM, a leading provider of Identity and Access Management (IAM) solutions, today announced it will be presenting at InfoSec World 2018 Conference and Expo, March 19-21 at Disney’s Contemporary Resort, Lake Buena Vista, Fla. Jeff Bohren, Chief Software Engineer, Optimal IdM will discuss, “Bridging the Protocol Gap on Cloud Identity Projects” on Mon., March 19 at 3:20 p.m. The breakout session will help attendees learn the origin of protocols and when to use them, best options to use with mobile apps, how to deal with situations outside of specifications and security concerns to consider. “Bridging the divide between newer authorization and federation protocols, such as OAuth2 and OpenID and connecting to older federation protocols like SAML2 and WS-Federation, presents some unique challenges,” said Bohren. “We will discuss those challenges and look at some practical, real-world solutions.” Bohren has over 30 years of software development and architecture experience and over 20 years of knowledge in identity management and federation. He served on several OASIS technical committees including SAML, SPML, and DSMLv2. He was the BMC Software representative to OASIS, Project Liberty, and OpenAuthentication.org. “InfoSec World 2018 brings together practitioners, researchers, and experts at every level to create an interactive forum that helps security professionals learn about the latest advances in cybersecurity and the critical threats facing their organizations,” said Katherine Teitler, Director of Content, MISTI. “We are especially pleased with the content that will be presented at this year’s conference and are proud to have Optimal IdM join our program lineup. The knowledge, experience, and strategies shared will be invaluable to InfoSec World attendees.” InfoSec World 2018 features expert keynote addresses, stimulating panel discussions and interactive roundtables, hands-on tech labs, as well as informative breakout sessions. Additionally, pre- and post-conference workshops and summits on CISO Leadership, Cloud Security, and Privacy and Risk are scheduled. To top it off, this gathering provides a rare opportunity for information security professionals to network in an intimate yet vibrant setting, with more than 1,000 attendees from a range of industries, professional backgrounds, and countries. ...

11.2.2017 - Initiating Steps On The Path To GDPR Compliance

If you are reading this you have heard of the General Data Protection Regulation (GDPR) and are concerned whether it applies to you. Since it applies to all European Union citizens, no matter where they are located in the world, it is very likely that it does. The question of enforceability, especially if you don’t have an EU presence, is a different issue. But most multi-national companies are following the requirements down to their supply chain, so if you are not compliant, you may find business opportunities drying up. ...

Tags

  • The database in which all of your organization’s sensitive identity data is stored.
  • A digital ledger in which digital transactions are recorded chronologically and publicly.
  • Securely managing customer identity and profile data, and controlling customer access to applications and services.
  • The means of linking a person's electronic identity and attributes, stored across multiple distinct identity management systems.
  • A legal framework that sets guidelines for the collection and processing of personal information of individuals within the EU.
  • The policy-based centralized orchestration of user identity management and access control.
  • An authentication infrastructure that is built, hosted and managed by a third-party service provider.
  • A security system that requires more than one method of authentication from independent categories of credentials to verify the user's identity for a login or other transaction.
  • A global provider of innovative and affordable identity access management solutions. 
  • Managing and auditing account and data access by privileged users.
  • Tools and technologies for controlling user access to critical information within an organization.
  • An authentication process that allows a user to access multiple applications with one set of login credentials.