Please use this identifier to cite or link to this item: https://hdl.handle.net/10419/312248 
Year of Publication: 
2023
Citation: 
[Journal:] Business & Information Systems Engineering [ISSN:] 1867-0202 [Volume:] 66 [Issue:] 4 [Publisher:] Springer Fachmedien Wiesbaden GmbH [Place:] Wiesbaden [Year:] 2023 [Pages:] 421-440
Publisher: 
Springer Fachmedien Wiesbaden GmbH, Wiesbaden
Abstract: 
Digital identity and access management (IAM) poses significant challenges for companies. Cyberattacks and resulting data breaches frequently have their root cause in enterprises' IAM systems. During the COVID-19 pandemic, issues with the remote authentication of employees working from home highlighted the need for better IAM solutions. Using a design science research approach, the paper reviews the requirements for IAM systems from an enterprise perspective and identifies the potential benefits of self-sovereign identity (SSI) – an emerging, passwordless paradigm in identity management that provides end users with cryptographic attestations stored in digital wallet apps. To do so, this paper first conducts a systematic literature review followed by an interview study and categorizes IAM system requirements according to security and compliance, operability, technology, and user aspects. In a second step, it presents an SSI-based prototype for IAM, whose suitability for addressing IAM challenges was assessed by twelve domain experts. The results suggest that the SSI-based authentication of employees can address requirements in each of the four IAM requirement categories. SSI can specifically improve manageability and usability aspects and help implement acknowledged best practices such as the principle of least privilege. Nonetheless, the findings also reveal that SSI is not a silver bullet for all of the challenges that today's complex IAM systems face.
Subjects: 
Authentication
Digital wallet
IAM
Security
SSI
Verifiable credential
Persistent Identifier of the first edition: 
Creative Commons License: 
cc-by Logo
Document Type: 
Article
Document Version: 
Published Version

Files in This Item:
File
Size





Items in EconStor are protected by copyright, with all rights reserved, unless otherwise indicated.