Demand for safe, authenticated access to enterprise applications in an era of bring your own device (BYOD) initiatives is growingand so is the cost of implementing authentication strategies, according to a report from authentication specialists Encap. The study found enterprises with around 3,000 employees could save more than $165,000 by shifting to smart device-based software from hardware-based solutions for vital authentication in a BYOD era.
In terms of capital expenditure, the deployment cost for hardware one-time password (OTP) is $202,000 vs. smart device-based software at $9,000, representing a 95 per cent decrease in cost, according to the companys findings, and noted hardware OTP replacement costs are over 90 per cent more expensive than all software based approaches. Annual cost per user studies found SMS OTP is the highest annual cost at $35, when compared to $15 for smart device-based software.
“The BYOD trend is growing, and employees are demanding access to enterprise applications quickly and securely, no matter where they are or what device they are using. A solution that allows access to these services regardless of the device, location or network in a secure manner is invaluable to enterprise IT managers,” Sarah Wallace, analyst for Heavy Reading, said in a prepared statement.
In conclusion, the report determined smart device-based software is at least 60 per cent less expensive than all other software based approaches in terms of annual costs per user. The study analyzed the average cost of the six most prevalent approaches to authentication for a large enterprise with 3,000 users over a three-year period.
“Having invested in remote access and cloud apps, enterprises must do everything possible to simplify speedy and secure access. Smart device software authentication turns smart devices – enterprise or employee-owned – into security credentials at an unbeatable price point,” Thomas Bostrom Jorgensen, CEO of Encap said in a press release. “Our study shows that the time for hardware-based authentication has passed – it is just too expensive when compared with the alternatives.”
These approaches included hardware, such as hardware OTPs and smart tokens (a USB or smart card), as well as software, like the aforementioned smart device-based software, mobile OTP (usually an app), PC OTP (via a web-browser) and SMS OTP. All of the approaches are two-factor authentication where the user requires something they have (a card or token) and something they know (password or PIN) to gain access.
“But this is about more than just cost,” Jorgensen continued. “Employees – people – want simple access across a range of devices. Similarly, IT managers want to easily integrate authentication without painful provisioning and replacement issues. Hardware approaches are incompatible with today’s world of smart devices, remote access and cloud apps. It’s time for a change.