Help Me With Sign Oregon Banking Form

Help me with industry sign banking oregon form safe

what's up s'mores I'm Shannon Morse welcome to my youtube channel all about tech reviews tutorials and how to's welcome to episode 2 in my series about Identity and Access Management and why user names as well as passwords are both terrible for authentication and we should probably work towards a better future if you did miss it here's a link to that video it's also down in the description below for episode one but today I am going to delve into using single sign-on technology and I'm gonna share one way that you can work remotely and help protect clients and co-workers using zoom yes zoom with SSO so what is single sign-on well single sign-on aka SSO allows a user to just use one set of login credentials to access multiple applications or accounts it is so convenient to just use one set of creds to sign-in everywhere so lots of companies and websites have already adopted this but even though it's convenient it does have risks so there are some crucial do's and don'ts when it comes to implementing SSO so when you think about single sign-on some examples immediately come to mind including using Google or Facebook logins to access a variety of applications webpages and platforms online now this obviously can save a user from dealing with password fatigue and it makes the login experience a lot faster so from a business standpoint it totally makes sense why a company would want to use SSO I mean basically the faster you can get somebody to sign onto your application the more likely they will use your site or your product so it makes sense yay profit but not only that single sign-on is used by companies too I used to work at a bank as a bank teller and eventually as a CSR for a credit card payment systems merchant accounts even though I had moved to it like a totally different building a totally different client list I continued to use the same login credentials to access my employee account at that company because they were using single sign-on so whether I was working as a bank teller or a CSR I would never need to memorize a new set of usernames and passwords it made my life so much easier as an employee now since each and every employee had their own SSO creds that limited the amount of work that the security and networking employees had to do it was a lot easier for them to monitor and manage accounts for employees control access to different platforms restrict them whenever they needed like if somebody got fired for example it also limited the amount of password resets that they would have to deal with and it gave them faster response times whenever an employee quit or they changed jobs and they had to get more access or less access to different platforms within that network since this was years ago we didn't have any kind of bring your own device rules but if we did I suspect that SSO would have kept all of that absolutely same as well it would be incredibly hard to manage if each user had multiple accounts that had different access and permission levels for different platforms and different products and different devices list No thank you just thinking about that like totally stresses me out yeah I would never want to deal with that now with the rise of cloud applications it is more important than ever to make it easy for users and employees to securely sign on to platforms but given that we have so many different platforms that we are constantly logging into all the time reuse of usernames and passwords is an absolute threat now luckily SSO is scalable it can be automated freeing up Network admin time for other important tasks like defending against external malicious actors or external threats SSO also supports different standards the first one is saml that security assertion markup language the second one that I think of is Oh auth but wait you're probably wondering what those are so TL DR these are two different types of protocols that can be used to implement SSO ooofff is an open standard authorization protocol that was released in 2010 to wide adoption it's still used to this day by companies like Facebook Instagram Microsoft PayPal there's a whole bunch of brands that use OAuth if we're example a site says login with Facebook that's us if you're not on the Facebook website but you can still log in with your username credentials and password credentials using the Facebook log in oh aath has to use a separate tool for the authentication part something like open ID so that's the only drawback with OAuth saml on the other hand Sam oh that's what I like to say can both authorize and authenticate a user at the same time even though OA is newer sam'l is used a lot in enterprises so SSO can still be risky in some scenarios for example in 2018 attackers could use a vulnerability in the sam'l protocol to login to systems as if they were the targeted user another vulnerability hit ooofff allowing an attacker to gain access through a targets mobile account luckily both of these got fixed so this best practice is definitely not perfect because it still has some vulnerabilities and if some app doesn't support SSO then it's going to be an outlier for a whole network and integrating SSO any company that uses SSO should make sure that they audit what kind of applications what software and what programs should be used with single sign-on how users should be ID'd and identified make policies around SSO make sure to audit who gets what permissions you don't want everybody with like admin credentials for example set up a go live date and start switching on access to all those applications and platforms with SSO any applications that don't use SSO or don't allow it should seriously be reconsidered if you are integrating SSO into your environment now with people working from home more than ever how do you implement single sign-on for applications that your clients and their co-workers use to keep on collaborating well zoom is a great example they have been in the news constantly with all sorts of security issues they have seen a constant stream of bad press ever since the pandemic started because of security issues because of Zumba I mean yeah that can be kind of a concern if you don't know how to protect your zoom account but did you know that you can actually use SSO with zoom now I did get to test this using my sponsors platform WW pass with my passkey that I already have to authenticate and authorize my sign-on as if I was working at or was a client of the WW pass company so once it's set up as an end user all I had to do is scan a QR code and then I log in to the company zoom account so I can manage meanings or access tools to collaborate that's like literally it so WW pass teamed up with Glu org to streamline this process so any company using zoom can set it up themselves for more security and safety now here's what that looks like from an end-user since I did get to test it from my desktop I log into my pass Hub dotnet account if you don't know what that is check out my video about why passwords are absolutely terrible for security in another tab I open up the companies zoom vanity URL so for this example it's wwp a zoom dot u.s. I click config account which brings me to a screen where I can scan a QR code with my passkey to log in so I do that with my phone and I authenticate my pass Hub account with my pen since my passkey is unknown to that domain it verifies me with domain credentials that are only used once for this first binding so the systems administrator has already created a username and password for me and shared it within the pass Hub password manager I'm just gonna copy and paste those credentials into the zoom SSO login page using this bind with a password option from there I click bind and then it logs me in now that was just the first time if I sign out and I go back to that login page any future attempts to log in will just require me to authenticate using a QR code and then scanning it with my passkey app no username no password required none of that that's pretty cool right I thought it was cool it's I mean it's so easy and it's so much faster than using a username and password I don't have to store I don't have to memorize a password after binding my account to this zooom vanity URL and domain now this is just one of the many ways that SSO can be implemented to prevent unauthorized access to some kind of account and in this case it was zoom as the example single sign-on is really cool and I'm so happy that I have a sponsor that feels the same way in this entire series is being sponsored by w w pass give yourself in your company write factor authentication not just multi-factor authentication what W W pass you can eliminate the need for usernames and passwords by making your smartphone or a physical token your first authentication factor with the second line of defense being your PIN or biometrics none of which is ever received by w w pass they take security to the next level by helping you set up your users with pass keys which can be used as electronic IDs to authenticate them and give them access to accounts like collaboration tools such as zoom everything is encrypted on the client side so service providers cannot access user data while data segregation helps protect data at rest instead of using usernames and passwords which can be easily stolen or incorrectly stored all the time w w pass uses a universal pass key ID to allow your users proper access to buildings to labs as well as digital access to applications or data storage the pass key can also be set up to be used as identification for ID cards for proof of coverage for consolidation of identifying documents pass keys can be used however your business sees fit whether that's via a smartphone app a smart card or even a physical token by authenticating users with these IDs that are not human readable ww pass aids to decrease identity theft and data breaches while still giving users access to top applications that they use to get their work done and this entire series would not be possible without the support of w w pass and viewers like you check out everything that w w pass has to offer including details about securing zoom accounts using w WPS and glue SSO over at w pass comm and i would like to thank them so much for sponsoring my channel now one of the types of single sign-on technologies is using social logins so next time in this series I'm gonna be delving into the pros and cons of those kind of logins remote work and working from home can be kind of stressful especially if your house is full of pets and kids and spouses and all sorts of other things I don't know Tiger King I've been watching that show lately it's so weird but hopefully implementing some of these can help comment below if you have any questions and I will see you next time I'm Shannon Morse thank you so much for watching and don't forget to Like and subscribe bye