What is push authentication?

Push notification authentication explained

Push notification authentication is a widely adopted method of authentication that enhances the security of the login process by adding an additional layer of protection. Push authentication verifies a user's identity by sending a push notification that displays details about the login request (e.g., application, location) on the user's registered mobile device. The notification prompts the user to accept or deny a login attempt, transaction, or any other action requiring authentication.

By leveraging the convenience of smartphones, it offers a user-friendly approach to verifying user identity. The push verification method acts as an ideal complement to traditional methods like passwords and SMS-based two-factor authentication (2FA).

Where is push-based authentication used?

Push-based authentication finds applications in various online services, such as:

• Banking and financial institutions: Banks and financial services use it to secure online banking, transactions, and account access.
• Corporate environments: Enterprises implement it for secure access to corporate networks and applications.
• Email services: Email providers use it to secure and prevent unauthorized access to email accounts.
• Healthcare: Healthcare providers use it to protect access to patient records and comply with regulatory standards.
• Cloud storage services: These services use it to secure access to cloud storage accounts and sensitive data.

How does push authentication work?

• Initiation: When a user tries to access a service, a login request is sent to the authentication server.
• Push notification: The authentication server sends a push notification to the user's registered mobile device via the service's mobile application.
• User interaction: The user receives a notification with details about the login attempt. The user will verify the push notification and click it to approve or deny the request. This response is sent back to the server.
• Verification and access management: The server verifies the response. If approved, the user is granted access; otherwise, the request is blocked.

Advantages of using push notifications as an authenticator

• Convenience: Approving or denying a login request through an MFA notification requires just a click, which makes it more convenient and quicker than entering passwords or codes.
• Accessibility: Eliminates the need for physical tokens or security keys since smartphone usage is widespread.
• Reduced fraud: Prevents phishing and manipulator-in-the-middle attacks by verifying actions directly with the user.
• Cost-effective: Eliminates the need to purchase and manage tokens or security keys.
• Deny suspicious requests:Users can monitor suspicious activity and immediately block access to login attempts they did not initiate.

Disadvantages of using push notifications as an authenticator

• Device dependency: Prevents login accessif the registered device is lost or stolen.
• App dependency: Requires installing an authenticator app on the mobile device.
• Internet requirement: Requires an internet connection to send and receive notifications.
• Potential delays: Delays in push notifications due to network issues could affect timely authentication.
• MFA fatigue risk: Attackers flood users with repeated prompts to trick them into approving a fraudulent login request.

How to secure your accounts if your phone is lost or stolen

If your smartphone is lost or stolen, you will be unable to log in to various applications if they use push notification authentication. Here are a few steps to follow immediately if your phone is lost or stolen.

• Report the loss: Report the loss to prevent unauthorized use of the device and potentially deactivate it.
• Lock or erase your device: Use a device management service like Find My Device (for Android) or Find My iPhone (for Apple) to lock or erase data on your device remotely.
• Temporary access: Notify your service provider that uses push notification authentication to disable the authentication service temporarily, and switch to another device.
• Update your authentication methods: Access your accounts through alternative authentication methods, such as email or SMS-based 2FA, if available, and change your passwords.
• Re-register a new device: Once you have a new mobile device, register it with your authentication service.

Enabling MFA with push notification authenticators through ADSelfService Plus

ADSelfService Plus is an identity security solution that provides adaptive MFA with support for a wide range of authenticators, including push notification authentication. It integrates seamlessly with authenticators, enhancing your overall login security. ADSelfService Plus provides MFA for endpoints, such as cloud and on-premises applications, VPNs, and OWA. In addition to these features, it also provides self-service password management and enterprise SSO.

People also ask