Published: 29 January 2024
用户认证是数字身份和身份优先安全的基础。负责身份与访问管理的安全和风险管理领导者应寻找合适的工具集，最大限度地降低账户接管风险，并优化员工和客户的用户体验，以落实体现以人为本设计的网络安全战略，提升凝聚力。
访问管理厂商是大多数企业机构首选的身份认证提供商，但其通常做不到满足所有需求或支持所有用例，从而为专业厂商创造了机会。
无论是为了改善用户体验还是缓解风险，Gartner客户对无密码认证的兴趣仍很浓厚。包含密钥的在线快速身份认证（FIDO2）具有重要战略意义，然而并非通用解决方案。在中短期内，其他方法可以提供重大价值。
针对现行多因素身份认证（MFA）方法的攻击激发了企业机构对防网络钓鱼MFA和强大身份验证功能的兴趣，以实现凭据颁发和账户恢复。
用户认证与帐户接管（ATO）预防及其他分析工具的功能日趋一致并出现重叠。这些技术丰富了自适应访问方法，可进一步缓解风险，并改善用户体验。因此，有可能与访问权限管理（AM）工具相融合。
负责身份与访问管理（IAM）的安全和风险管理领导者，应：
通过在尽可能多的用例中运用AM工具的原生功能，转向最简有效的用户认证工具集，以降低成本并向所有用户群提供更一致的用户体验。
充分利用现有工具的功能，即便是仅应用于一个或几个用例（例如Windows和软件即服务[SaaS]登录），尽可能缩短无密码认证的价值实现时间。更广泛地探索使用密钥和其他FIDO2选项，以提供防网络钓鱼的无密码MFA。
扩展和深化“基于风险”或“有条件”的方法，在自适应访问策略中集成ATO预防、身份确认和其他分析工具，从而最大程度地减少摩擦，优化用户体验，同时增强韧性和灵活性。
投资身份验证和类似工具，创建强大的凭据颁发和账户恢复流程。
Clients can log in to view the entire document.
Analysts:
Ant Allan, James Hoover, Robertson Pimentel
Gartner research, which includes in-depth proprietary studies, peer and industry best practices, trend analysis and quantitative modeling, enables us to offer innovative approaches that can help you drive stronger, more sustainable business performance.
Our independence as a research firm enables our analysts to provide unbiased advice you can trust.
Not only is Gartner research unbiased, it also contains key take-aways and recommendations for impactful next steps.
Our research practices and procedures distill large volumes of data into clear, precise recommendations.
We provide actionable, objective insight to help organizations make smarter, faster decisions to stay ahead of disruption and accelerate growth.
We offer one-on-one guidance tailored to your mission-critical priorities.
We work with you to select the best-fit providers and tools, so you avoid the costly repercussions of a poor decision.
Connect directly with peers to discuss common issues and initiatives and accelerate, validate and solidify your strategy.
Gartner clients can log in to access the full library.
Attend a Conference
Experience Information Technology conferences
With exclusive insights from Gartner analysts on the latest trends, sessions curated for your role and unmatched peer networking, Gartner conferences help you accelerate your priorities.
Gartner Identity & Access Management Summit
Las Vegas, NV
© 2026 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. and its affiliates. This publication may not be reproduced or distributed in any form without Gartner's prior written permission. It consists of the opinions of Gartner's business and technology insights organization, which should not be construed as statements of fact. While the information contained in this publication has been obtained from sources believed to be reliable, Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information. Although Gartner business and technology insights may address legal and financial issues, Gartner does not provide legal or investment advice and its insights should not be construed or used as such. Your access and use of this publication are governed by Gartner’s Usage Policy. Gartner prides itself on its reputation for independence and objectivity. Its insights are produced independently by its business and technology insights organization without input or influence from any third party. For further information, see Guiding Principles on Independence and Objectivity. Gartner publications and other content may not be used as input into or for the training or development of generative artificial intelligence, machine learning, algorithms, software or related technologies.
