Providing current and future ShareFile customers with the capability to leverage multifactor authentication to protect access to their sensitive data is a best practice that is quickly becoming industry standard and personally gives me peace of mind.
MANNY LANDRON CISSP, CISA, CISM, CITRIX SHAREFILE
Citrix ShareFile is a secure data sync and sharing service that allows organizations to mobilize all enterprise data and empower user productivity anywhere. ShareFile enables mobile productivity with read-write access to data and allows users to securely share files with anyone and sync files across all of their devices. Citrix ShareFile has a strong presence in security-conscious verticals, including Finance, Accounting, Legal, Insurance and Healthcare. It was important that they provide these customers with strong access controls to avoid a breach of their account.
Citrix ShareFile was looking for a way to add an extra layer of online security with a robust solution that wouldn’t require customers to remember yet another series of usernames and passwords. Looking for a globally reliable authentication provider that not only emphasizes security but also the nuances of an easy user experience can be a difficult process. Citrix ShareFile needed a partner that could work with their UI/UX team to provide best practice recommendations and ensure that opting in and using two-factor authentication (2FA) would be as simple as possible while remaining extremely secure.
Citrix ShareFile gave their users the option of activating multi-factor authentication on their ShareFile account using TeleSign’s SMS verification. Once users choose this option, they are required to enter a one-time PIN code, sent to their phone number, already on record, whenever they log in from a new device or unknown IP address. This represents an extra layer of protection, beyond a username and password, which effectively blocks fraudsters from gaining access to an account, even if a fraudster has obtained the login credentials. Once a fraudster attempts to log in, 2FA is activated, preventing any possibility of account compromise.