The End of thePassword Begins Now
Zero sign-on. It’s easy when yourmobile device is your secure access to the enterprise.

ivanti.com

Introduction
Passwords. They’re the top security risk and anotorious end user pain point. And they’re about tobecome a memory. Ivanti is eliminating passwords
by making the mobile device your identity and yoursecure access to the enterprise.
We’re also making it simple, because your existing
Ivanti Unified Endpoint Management (UEM) is at thecenter of this breakthrough, creating the foundationof our end-to-end, zero trust security approach. Thatmeans you’ve already got what it takes to make yourorganization a password-free zone for smootherexperiences and greater productivity.
This ebook explains how Ivanti Zero Sign-On(ZSO) ends the pain of passwords, and how yourorganization can benefit from this groundbreaking
shift in security by leveraging your investment in yourIvanti UEM.

The End of the Password Begins Now | WHITEPAPER

2

The problem with passwords
Passwords have become more of a security liability than a security solution.
They represent headaches for IT and hassles for end users. Efforts toimprove the situation have failed because passwords were minimized, notentirely removed from the equation.

61% of breaches involved
credentials.1

Security challenges for IT
As a top cause of breaches, passwords represent tremendous risk fororganizations, creating an ongoing security challenge for IT. And forhackers, they represent a potential payday as automated brute force
programs make it relatively easy to crack them.

Use of stolen credentials
was second most frequenttactic in data breaches.1A wide variety of social engineering tactics are also used for credential
theft, including phishing attacks, which use email or malicious websites tosolicit passwords. Other exploits, such as “vishing” (voice phishing) and“smishing” (SMS/text phishing), are also becoming more prevalent. But thisisn’t a scary story. It’s a chance for change.

Poor user experience

Credentials compromised
faster than any other datatype.1

A universal truth: users can’t stand passwords. This growing frustration
only contributes to their risk. To strengthen them, passwords have become
more complex, which makes remembering them even more difficult. Users
are now expected to memorize passwords of at least eight characters, withuppercase and lowercase letters, a number, and a special character – and it
must be unique within the last three months. Trying to type these strings ofcharacters into mobile devices is a whole new level of frustration.
The sheer volume of passwords employees need to remember exacerbates
the problem. Variations of this frustrating password experience arerepeated for all cloud services and other applications within theorganization. The result is forgetting, resetting, lockouts and a repeating
pattern of non-productivity.

23% of organizations had
security events related tobrute force and credential
stuffing attacks.1

Risky workarounds
The trickier password requirements become, the morepeople are driven to risky behavior to deal with them.
To avoid the hassle of resetting or getting locked out

29% of people rotate between
just 5-10 passwords.2

from failed attempts, users resort to:■ Using the same password across multiple

accounts.
■ Handwritten passwords stuck right on devices.
■ Storing all their passwords in one obviously

named file.
ZSO provides both SSO and MFA functionality, thus
we should avoid denigrating SSO and MFA in our ownmaterials.

The Sony breach was linked
to a file directory named“Password.”3

Zero sign-on
We said this wasn’t just a scary story, right? Here’s
the happy ending. It took the leader in mobile security
to figure out how to replace the password and createa zero sign-on experience.
With mobile as your ID and secure access, seamlessauthentication experience is possible from anywhere.
Users can securely access any business app, device
or resource with a glance or a tap of their finger.
No passwords required. Just simple passwordlessaccess to any service, from any device, on any OS –anywhere. With the rise of the Everywhere Workplace,
this has never been more important.

Consumer-like security easeEnd-to-end, zero trust approach

Providing this consumer-like security ease is a natural

It’s all a part of how we’re redefining enterpriseextension of what we’ve already come to expect fromsecurity with an end-to-end, zero trust approach –our mobile devices. The most widespread example ofwhich starts with the UEM foundation you alreadythis is mobile payment systems, such as Apple Pay

have. This grants access only after correlating user,and Google Pay, which let you enroll a credit or debit

device, app, network and threats – all without requiringcard. When you pay using that card, the systems

a password.

authorize the transaction based on something you
have (your phone, watch, or tablet) and something youare (a biometric confirmation via a technology such as
Apple’s Face ID or Touch ID). We’re bringing this typeof seamless security experience to the workplace.

Any cloud service.
This same passwordless process also allows secureaccess to any cloud service your company needs,
such as Microsoft 365, Salesforce or Dropbox.
Any device.
This seamless security extends to devices that yourorganization doesn’t manage, such as contractors andpartners who need access to certain company apps.

Never trust, always verify.

Validate thedevice

Establish user
context

Check appauthorization

Verify networks

Passwordless access to any
service from any device on
any OS from anywhere.
Detect andmitigate threats

Our devices already use
biometrics for secure access.

Ongoing compliance enforcement

The End of the Password Begins Now | WHITEPAPER

5

Zero Sign-On.
Ivanti delivered.
By turning your mobile device into your secure ID with
end-to-end, zero trust security, Ivanti has created aworld in which you can:■ Reduce security risk from credential theft.

ivanti.com
1 800 982 2130
sales@ivanti.com■ Avoid users’ risky password workarounds.
■ Protect against growing mobile threats.
■ End the frustrating cycle of forgetting andresetting passwords.
It’s all possible because of end-to-end, zero trust
security that starts with the UEM framework you
already have. Put it to work to end passwords in yourorganization. Users and IT will thank you.

Learn more

1.

Verizon, “2021 Data Breach Investigations Report”, 13 May 2021.
https://www.verizon.com/business/resources/reports/dbir/2021/
masters-guide/2.

Verizon, “2021 Mobile Security Index”, 6 April 2021. https://www.verizon.com/business/resources/reports/mobile-securityindex/2021/foreword/

3.

Insider, “Thousands Of Leaked Sony Passwords Were Reportedly
Kept In A Folder Marked ‘Password’”, 4 December 2014. https://www.businessinsider.com/sony-leak-reveals-thousands-ofpasswords-in-obvious-password-folder-2014-12

Copyright © 2022, Ivanti. All rights reserved. IVI-2530 01/22 RD/FG/MM