Book Image

Implementing Multifactor Authentication

By : Marco Fanti
Book Image

Implementing Multifactor Authentication

By: Marco Fanti

Overview of this book

MFA has emerged as an essential defense strategy in the wide-ranging landscape of cybersecurity. This book is a comprehensive manual that assists you in picking, implementing, and resolving issues with various authentication products that support MFA. It will guide you to bolster application security without sacrificing the user experience. You'll start with the fundamentals of authentication and the significance of MFA to familiarize yourself with how MFA works and the various types of solutions currently available. As you progress through the chapters, you'll learn how to choose the proper MFA setup to provide the right combination of security and user experience. The book then takes you through methods hackers use to bypass MFA and measures to safeguard your applications. After familiarizing yourself with enabling and managing leading cloud and on-premise MFA solutions, you’ll see how MFA efficiently curbs cyber threats, aided by insights from industry best practices and lessons from real-world experiences. Finally, you’ll explore the significance of innovative advancements in this domain, including behavioral biometrics and passkeys. By the end of the book, you'll have the knowledge to secure your workforce and customers, empowering your organization to combat authentication fraud.
Table of Contents (20 chapters)
1
Part 1: Introduction
4
Part 2: Implementing Multifactor Authentication
12
Part 3: Proven Implementation Strategies and Deploying Cutting-Edge Technologies

Using Keycloak for SSO

Applications or services that request authentication from a user are called clients in Keycloak. Generally, clients are applications and services that want to use Keycloak as an SSO solution:

  1. Click Clients in the left menu, and then Create client:
Figure 9.20 – The Clients page

Figure 9.20 – The Clients page

  1. Enter a unique Client ID value and click Next:
Figure 9.21 – The Create client page

Figure 9.21 – The Create client page

  1. Click Save:
Figure 9.22 – The Create client capability page

Figure 9.22 – The Create client capability page

After the client is created, it is not very useful unless it protects an application or service. Keycloak provides a test application at https://www.keycloak.org/app and we are going to use that application to test Keycloak.

  1. Enter https://www.keycloak.org/app/ in the Root URL field. Enter https://www.keycloak.org/ in the Valid redirect URIs field. Enter * in the Valid post logout redirect URIs field...