SecureAuth Corp. today announced a major upgrade to its identity management software Arculix, with new features that include improvements to its authentication orchestration and integrations to Citrix and Microsoft’s Entra identity products to enable more automated authentication processes.

Orchestration is no small feature enhancement. It’s the heart and soul of identity management. Setting up the various trust relationships, access rights and other connectivity details can be a tiresome and difficult manual process in the best of circumstances, so automating this minutia and creating the conditions to facilitate the dynamic workflows involved in continuous or adaptive authentication is absolutely essential.

This is not a new concept: Risk levels and login methods are constantly being adjusted by the management software to specific situations, so that a remote login might be subject to more scrutiny and require more details than a local one, for example. SecureAuth has long been a leader in this type of authentication.

One of its customers, Bass Pro Shops, has implemented a wide variety of automated actions based on these different risks, such as “impossible travel” — multiple logins from different parts of the world — as well as using anonymous proxies or different phones, and other indications that a user’s account has been compromised (below).

Identity management is also undergoing a major transformation as passwordless technologies begin to percolate throughout enterprise networks and applications, in many cases replacing less secure authentication methods that rely on SMS factors, for example.

The modern identity management product has become increasingly important as the need for these better authentication methods has become critical to securing applications, users and customers. As automation routines improve, authentications can become more rigorous without being burdensome for the user. One trend is to consider adopting microsegmentation to isolate individual apps, essentially abstracting firewalls to specific workloads and users.

Arculix’s new orchestration features make use of no-code methods that allow security managers to use graphical interfaces to design and automate their workflows.

Images: Pixabay, SecureAuth