https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/m_ise_interoperab

single methods of authentication can be compromised more easily than MFA. MFA, or multi-factor authentication, is a security process that requires users to provide two or more factors to verify their identity and access resources. MFA reduces the risk of unauthorized access by making it harder for attackers to compromise all the factors needed, especially if they are different in nature, such as something you know (password), something you have (token), and something you are (biometric).
To understand the concept of MFA and why it is important for authentication security, you can refer to the following sections of the source book:
* Section 1.1.1: Describe the concepts of identity and access management
* Section 1.1.1.1: Describe the concepts of identity principles
* Section 1.1.1.2: Describe the concepts of authentication
* Section 1.1.1.3: Describe the concepts of authorization
* Section 1.1.1.4: Describe the concepts of accounting
* Section 1.1.1.5: Describe the concepts of identity stores
* Section 1.1.1.6: Describe the concepts of MFA
References:
Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0 What is Multi-Factor Authentication? | IBM How to implement Multi-Factor Authentication (MFA) | Microsoft Security Blog

Using an Internet browser to access cloud-based service creates the risk of insecure implementation of API.
API stands for Application Programming Interface, which is a set of rules and protocols that allow different applications or services to communicate and exchange data. API is often used to access cloud-based service, such as software as a service (SaaS), platform as a service (PaaS), or infrastructure as a service (IaaS).
However, if the API is not implemented securely, it can expose sensitive data or allow unauthorized access to the cloud service. For example, an API may not use encryption, authentication, or authorization mechanisms to protect the data in transit or at rest. An API may also have vulnerabilities such as injection, broken authentication, or insufficient logging and monitoring, which can be exploited by attackers to compromise the cloud service or the user's browser. Therefore, it is important to follow the best practices and standards for secure API development and testing, such as OWASP API Security Top 10. References:
* 1: Implementing and Operating Cisco Security Core Technologies (SCOR) - Cisco
* 2: 350-701 SCOR - Cisco
* 3: Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0
* 4: 12 Cloud Security Issues: Risks, Threats & Challenges - CrowdStrike
* 5: 12 Risks, Threats, & Vulnerabilities in Moving to the Cloud - SEI Blog
* 6: Remote Browser Isolation Protects Users from Threats - Cisco Umbrella
* 7: Which risk is created when using an Internet browser to access cloud-based service?
* 8: Browser in the Cloud: The Evolution of Secure Browsing - Leostream
* [9]: OWASP API Security Top 10 2023