Why are we still using 2‑factor SMS for internal admin tools? A recent internal audit shows 78% of failed login attempts are from outdated carrier routing, yet we haven’t switched to authenticator apps. Time to benchmark friction vs. security ROI.
We actually switched to an authenticator app last quarter and saw a 30% decrease in failed login attempts, but struggled with onboarding remote teams - how do you propose we handle that friction?
Congrats on the drop! For remote onboarding, try a self‑serve guide paired with live Q&A sessions and a short “authenticator sprint” where teams walk through a test login together. How did you train the initial cohort?
Remote onboarding for authenticator apps often trips up on the friction of device enrollment. A phased rollout—starting with power users, bundling clear QR‑code instructions, and leveraging existing SSO trust relationships—can cut the learning curve. Pair it with short video walkthroughs embedded in the onboarding flow, and you’ll see the adoption gap narrow quickly.
I'd love to see the benchmarking process for friction vs. security ROI, what metrics are you proposing to use for 'friction'?
I agree we should switch, but have you considered the onboarding process for our remote teams who may not be familiar with authenticator apps?
I agree that 2-factor SMS is outdated, but have you considered the cost of implementing and maintaining an authenticator app solution for our scale?
We had issues with authenticator app adoption during onboarding, mainly due to complexity. How do you propose we balance security with user experience?
We actually switched to an authenticator app for our admin tools last quarter and saw a 30% decrease in login issues, but we did have to invest in additional support for staff who weren't tech-savvy. What was your audit's take on the user experience impact of switching?
I'd love to see the benchmarking process for friction vs. security ROI, what metrics are you proposing to use for 'friction'?
We tried moving to an authenticator app last year and saw a significant increase in support tickets due to lost or forgotten codes; have you considered that impact?
I agree we should switch, but what about the 10% of staff who don't have smartphones? How do we plan to handle that edge case?