{"id":23218,"date":"2021-10-28T15:36:25","date_gmt":"2021-10-28T19:36:25","guid":{"rendered":"https:\/\/www.sherweb.com\/blog\/?p=23218"},"modified":"2025-04-17T14:43:38","modified_gmt":"2025-04-17T18:43:38","slug":"zero-trust-framework-identity-and-access-management","status":"publish","type":"post","link":"https:\/\/www.sherweb.com\/blog\/security\/zero-trust-framework-identity-and-access-management\/","title":{"rendered":"Implementing a Zero Trust framework: identity and access management (IAM)"},"content":{"rendered":"

Identity and Access Management (IAM) is a key piece of any Zero Trust<\/a> cybersecurity strategy. Usernames and passwords have become the first line of defense for modern information security practices, which is why IAM is so important.<\/p>\n

This first line of defense is under increasing attack as organizations take advantage of more Software as a Service (SaaS) applications to run their business and employ an increasingly distributed workforce. A 2020 study<\/a> from Malwarebytes found that 20% of organizations had experienced a breach via work-from-home employees.<\/p>\n

\"Microsoft<\/p>\n

 <\/p>\n

Identity and Access Management (IAM) solutions MSPs should know<\/h2>\n

To strengthen clients\u2019 IAM strategy, managed service providers (MSPs) should lead with a solution that many clients are already paying for with their Microsoft 365<\/a> subscriptions: Azure Active Directory (AAD). AAD has a rich feature set that can help protect identities in your Microsoft 365 environment and other applications.<\/p>\n

MSPs would also do well to offer clients Multi-factor Authentication<\/a> (MFA). About 99.9% of account compromise attacks<\/a> could be stopped with MFA, making it an increasingly imperative must-have for businesses of all sizes. MFA can be deployed using an authenticator app. Implementing Smart MFA processes can also help you decide when users should be prompted for MFA and when they don\u2019t need to be prompted to maximize productivity.<\/p>\n

Another effective solution is Single Sign On (SSO). We know clients use applications outside of Microsoft; we can securely publish access to in house apps within Microsoft 365 while also managing access to SaaS apps via a user’s AAD credentials, even enforcing MFA.<\/p>\n

In addition to security benefits, managing only one username and password helps employees be more productive. Below are just some of the commonly used apps that integrate with AAD for SSO.<\/p>\n

\"Microsoft<\/p>\n

How does AAD with MFA and SSO within the Zero Trust framework help businesses?<\/h2>\n

In the context of Zero Trust, the combination of AAD, MFA and SSO help businesses:<\/p>\n