Dashlane launches first SSO powered by confidential computing

Date:
Thu, 20 Apr 2023 09:43:20 +0000

Description:
In what it's claiming as a world first, Dashlane is now using confidential computing to improve SSO application.

FULL STORY ======================================================================

Dashlane , our pick as the best password manager , has launched in beta its new Single Sign-On (SSO) feature which integrates with secure cloud technology.

Dashlane Confidential SSO makes use of AWS Nitro Enclaves to offer a secure and isolated cloud computing environment from which to operate, and is the first in a series of new security features that Dashlane will be releasing in the upcoming months.

While Dashlane already has SSO capabilities for cloud-based credentials, "the new configuration of Dashlane Confidential SSO removes layers of complexity
in deployment, offering a seamless integration with any SAML 2.0 (Security Assertion Markup Language) Identity Provider, all while maintaining the privacy of users' data." Head in the cloud

SSO allows users to log in to their numerous accounts for different software and services with just one set of credentials, vastly improving efficiency in the workplace. With Dashlane's new version of this feature, which makes use
of fully isolated virtual machines, there is now no need for "complex
customer configurations" to ensure that Dashlane can encrypt contents safely whilst maintaining zero-knowledge of them. read more

There's now a whole new way to log-in to your Google account

Are passwords and password managers still fit for purpose? And are the

alternatives any better?

5 reasons why businesses should never use consumer-grade password managers

This also means that, according to Dashlane, the Confidential SSO is the
first of its kind to allow for easy integration with a firm's identity management software , with Dashlane themselves mentioning popular examples such as Okta, AzureAD, JumpCloud, and Google Workspace.

According to Dashlane, this "not only [removes] the friction of hosting a separate encryption service but also [leverages] cutting-edge technology to uplevel Dashlanes zero-knowledge approach to security."

Confidential computing is a new paradigm in digital security and a
cornerstone in addressing the ever-evolving threat landscape, says Frederic Rivain, Chief Technology Officer at Dashlane.

He also added that "it is the first of several applications leveraging AWS Nitro Enclaves that we plan to unveil this year, and it also embodies our commitment to applying pioneering technology to deliver the most secure solutions for our customers without taxing them on convenience.

Arvind Raghu, Principal Specialist at Amazon Elastic Compute Cloud, commented that "AWS provides secure and reliable infrastructure that Dashlane relies on as a business built on customer trust.

"By leveraging AWS Nitro Enclaves, Dashlane is bringing the high-level security of confidential computing to their customers of all sizes to safeguard credentials."

One beta customer has already said that, thanks to the new feature, "our business and team members can easily access Dashlane along with our other
work applications."

They added that, "The deployment experience was seamless, allowing us to get our customers up and running quickly, making it very scalable for our team... data privacy and security are of utmost importance to us, and Confidential
SSO leverages confidential computing for a high level of security. This complements other areas of Dashlanes product and gives us peace of mind that our information is protected."

Other plans that Dashlane has for confidential computing include using AWS Nitro Enclaves for passkeys - which may be the future of credential security by eliminating the need for passwords altogether - as well as allowing for
the protection of customer data with a system that doesn't require a master password.

The company will also be releasing source code onto GitHub this summer to allow developers and researchers to vet its new confidential computing
system, in a move that Dashlane describes as part of its "recent push into greater transparency." Dashlane also topped our list of the best business password managers as well



======================================================================
Link to news story: https://www.techradar.com/news/dashlane-launches-first-sso-powered-by-confiden tial-computing


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)