Articles for

Service Desk Leaders

IT operations leaders cutting password and MFA ticket volume.

Showing 7 posts

OTP failure case scenarios enterprise 2026 reference — the five categories of OTP failure (SMS interception via SS7 and SIM-swap, TOTP time drift and device loss, push MFA fatigue attacks, hardware token battery and physical loss, recovery-channel gap), the operational cost of each failure mode at enterprise scale, the phishing-resistant credential classes that eliminate each failure category, and the migration path from OTP-dependent to OTP-optional workforce authentication.

OTP Failure Case Scenarios: The 2026 Enterprise Reference

One-time passwords fail in specific, patterned ways at enterprise scale — SMS interception through SS7 and SIM-swap, TOTP time drift and device loss, push-notification MFA fatigue, hardware token failures, and the recovery-channel gap that determines whether the failure produces a help desk ticket or a security incident. The 2026 enterprise reference on how OTP actually fails in production and what to deploy instead.

2026년 7월 8일•Andre Arantes

Enterprise multi-factor authentication buyer's guide for 2026 — segmented by workforce type

Buyer's Guides

The Best Multi-Factor Authentication Solutions for Enterprises in 2026

A 2026 buyer's guide to enterprise MFA solutions, segmented by workforce type. Compare 12 vendors across desk, frontline, contractor, and customer use cases.

2026년 5월 22일•Andre Arantes

Scaling OTP authentication across a large enterprise in 2026 — workforce-segmented rollout from desk workers on TOTP authenticator apps to frontline staff on shared FIDO2 keys to mainframe operators on smart cards, with consistent service-desk identity verification across recovery flows.

MFA & Authentication

Scaling OTP Authentication in Large Organizations: A 2026 Guide

How to scale OTP across an enterprise in 2026 — channel selection, recovery design, workforce segmentation, and where OTP belongs in a phishing-resistant architecture.

2025년 8월 29일•Andre Arantes

The authentication architecture gap that phishing-resistant MFA does not close — service-desk recovery flows, password reset workflows, and human-touchpoint verification, where 2026 attackers are landing instead of attacking the credential directly.

Perspectives

Beyond Foundational MFA in 2026: The Recovery Channel Gap

Phishing-resistant MFA is the right answer for the front door. It does not protect the recovery channel, which is where the 2026 attacks are landing.

2026년 6월 2일•Andre Arantes

One-time password authentication in 2026 — the six delivery channels (SMS, email, TOTP authenticator app, push notification, hardware token, magic link), their pros and cons, and how each maps to NIST 800-63B AAL2 / AAL3 ceilings and CISA's phishing-resistant MFA bar.

MFA & Authentication

OTP Authentication in 2026: Pros, Cons, and Better Alternatives

When one-time passwords still hold up in 2026, when they don't, and the phishing-resistant alternatives that have replaced them for high-impact use cases.

2025년 8월 29일•Andre Arantes

A security operations team examining a compromised authentication architecture in the aftermath of an adversary-in-the-middle attack.

MFA & Authentication

Your MFA Strategy Just Became Your Biggest Liability

What the Stryker attack revealed about device-dependent MFA — and what phishing-resistant authentication actually means in an era of AiTM session theft.

2026년 5월 27일•Garrett Garitano

The 2026 enterprise guide to passwordless authentication — covering FIDO2, passkeys, biometrics, smart cards, and deviceless options like Avatier's Identity Challenge Card, with workforce-specific selection guidance.

Buyer's Guides

15 Best Passwordless Authentication Solutions for Enterprises in 2026

A 2026 buyer's guide to enterprise passwordless authentication, segmented by workforce type. Compare 15 vendors across desk, frontline, contractor, and customer use cases.

2026년 5월 27일•Andre Arantes