Swipe identity
Sep 30th, 2012 by Jesper Kråkhede
I have been engaged in many IAM projects throughout my career and one thing that quite often is lacking in the projects is the identity discussion. What is an identity for this organisation?
We need to look at two separate entities: What’s needed for authentication and what’s needed for usability.
The authentication should be the least possible needed to manage the security requirements. It is all very well and fun to use biometrics, smart cards, long pass phrases etc. but in the end we should only implement as much as is needed for authentication. In some cases the identity is a photo id showing a picture together with your age. In some other cases we could use a swipe identity, the ability to swipe open your smart phone. 🙂
As for usability we need to add all those properties that is needed for your identity to integrate with all systems that is to use your identity for authentication, be it phone number, e-mail or biometrics.
In the end of the day the identity and the authentication is the first and the last you encounter at work.