July 2020 Summaries

FusionAuth has implemented breached password detection to help secure user accounts by checking if a user's password is in a database of compromised credentials. This feature is available on paid plans and can be enabled through the tenant settings page, allowing users to choose how they want to respond to breached passwords during login or registration events. The feature provides real-time checks and can prevent unauthorized access to systems if a password has been compromised. It also empowers users by allowing them to pick unique and strong passwords without being restricted by certain character requirements. While enabling this check may have a slight performance impact, the benefits of increased security and user empowerment outweigh the costs.

FusionAuth is being showcased as an excellent centralized identity management platform that enables easy single sign-on authentication with various applications, including Zendesk. This setup allows users to access multiple tools with one username and password, promoting operational efficiencies by managing all users in a single store. Additionally, HYPR's True Passwordless MFA will be integrated into FusionAuth, providing an easy and secure authentication method for authorized users. The webinar aims to demonstrate how FusionAuth can serve as a centralized authentication and authorization service.

The bottleneck architecture for modern organizations centralizes user management with a single system, routing all authentication and authorization requests through it. This approach enables single sign-on (SSO), increased visibility, decreased operational complexity, and increased choice of authentication methods. The centralized auth system can be configured to delegate decisions to relying parties or service providers, which can federate with external identity providers such as Google, HYPR, or Facebook. A well-maintained user management system accelerates custom application development by providing commonly used services, while making it easy to turn accounts on and off, and offering a better user experience through integration with various third-party accounts. However, there are challenges with this approach, including the SSO tax, ensuring adoption among developers and end-users, tying together the bottleneck system, and selecting a robust and flexible auth service.