During a SaaS migration with widespread user account management and access challenges, which single control would BEST resolve these issues?

During a SaaS migration with widespread user account management and access challenges, which single control would BEST resolve these issues?

• A. Single sign-on
• B. Multifactor authentication
• C. Network intrusion prevention system
• D. Password synchronization

Answer: (B)

Multifactor authentication directly strengthens the way users prove who they are, which is the heart of access issues during a SaaS migration. By requiring a second factor beyond a password—such as a one-time code, push approval, or a biometric—compromised credentials become far less usable to an attacker. This is especially important during migration when accounts are being provisioned, deprovisioned, or moved across systems, creating opportunities for weak passwords, reuse, or resets. MFA reduces the risk of unauthorized access across multiple SaaS apps with a single, consistent control, and it can be layered onto existing identity providers to cover many services with relatively straightforward deployment. Single sign-on improves convenience and centralized access management, but on its own it still relies on the strength of the initial authentication; if that primary credential is compromised, access across connected apps can be gained. Password synchronization alleviates login frictions but does not mitigate credential theft. A network intrusion prevention system protects the network level but does not address problems of weak or stolen credentials across SaaS applications. So, the strongest single defense for the described scenario is adding an effective second authentication factor to all user logins.

Multifactor authentication directly strengthens the way users prove who they are, which is the heart of access issues during a SaaS migration. By requiring a second factor beyond a password—such as a one-time code, push approval, or a biometric—compromised credentials become far less usable to an attacker. This is especially important during migration when accounts are being provisioned, deprovisioned, or moved across systems, creating opportunities for weak passwords, reuse, or resets. MFA reduces the risk of unauthorized access across multiple SaaS apps with a single, consistent control, and it can be layered onto existing identity providers to cover many services with relatively straightforward deployment.

Single sign-on improves convenience and centralized access management, but on its own it still relies on the strength of the initial authentication; if that primary credential is compromised, access across connected apps can be gained. Password synchronization alleviates login frictions but does not mitigate credential theft. A network intrusion prevention system protects the network level but does not address problems of weak or stolen credentials across SaaS applications. So, the strongest single defense for the described scenario is adding an effective second authentication factor to all user logins.