Understanding the behaviour of business users in multi-factor authentication adoption
Karuppiah, Sivam Prasath (2025)
Diplomityö
2025
School of Engineering Science, Tietotekniikka
Kaikki oikeudet pidätetään.
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi-fe2025052149133
https://urn.fi/URN:NBN:fi-fe2025052149133
Tiivistelmä
Context: Multi-Factor Authentication (MFA) has emerged as an important security control in response to rising cyber threats targeting unauthorized access to organizational systems and user accounts. However, while advanced authentication solutions continue to evolve, the successful adoption of MFA is impacted by user behaviour, usability challenges, and contextual factors that influence acceptance or resistance. Despite the growing necessity of MFA, a combined knowledge that integrates academic insights with real world industry practices and multi-domain study practices is lacking.
Objective: This research addresses this gap by combining white literature and grey literature sources to develop a comprehensive understanding of business user behaviour with MFA adoption. The primary objective is to identify the common attitudes and perceptions, factors influencing such perceptions, challenges and the level of awareness associated with MFA.
Method: A Multivocal Literature Review (MLR) methodology was applied by combining both white literature (peer-reviewed academic studies) and grey literature (industry reports). A formal review process guided the collection and analysis of 20 selected sources, followed by data extraction, thematic coding, and synthesis to identify common themes, adoption barriers, and influencing factors across different organizational contexts.
Results: The study presents a conceptual framework outlining the critical phases of MFA adoption, including user landscape analysis, organizational strategy, user engagement, and continuous improvement. It highlights common user challenges such as workflow disruption, authentication fatigue, recovery issues, and resistance to rigid enforcement. Additionally, the study proposes a diagnostic questionnaire to assist organizations in assessing user readiness and improving MFA rollout strategies.
Conclusion: MFA adoption represents a maturing area of research and practice that demands further user-centered investigation. This MLR provides a structured understanding of the behavioural, usability, and organizational factors influencing MFA acceptance, providing practical insights for both researchers and practitioners. The findings enable organizations to move beyond technical implementation by addressing the human factors essential for successful MFA adoption.
Objective: This research addresses this gap by combining white literature and grey literature sources to develop a comprehensive understanding of business user behaviour with MFA adoption. The primary objective is to identify the common attitudes and perceptions, factors influencing such perceptions, challenges and the level of awareness associated with MFA.
Method: A Multivocal Literature Review (MLR) methodology was applied by combining both white literature (peer-reviewed academic studies) and grey literature (industry reports). A formal review process guided the collection and analysis of 20 selected sources, followed by data extraction, thematic coding, and synthesis to identify common themes, adoption barriers, and influencing factors across different organizational contexts.
Results: The study presents a conceptual framework outlining the critical phases of MFA adoption, including user landscape analysis, organizational strategy, user engagement, and continuous improvement. It highlights common user challenges such as workflow disruption, authentication fatigue, recovery issues, and resistance to rigid enforcement. Additionally, the study proposes a diagnostic questionnaire to assist organizations in assessing user readiness and improving MFA rollout strategies.
Conclusion: MFA adoption represents a maturing area of research and practice that demands further user-centered investigation. This MLR provides a structured understanding of the behavioural, usability, and organizational factors influencing MFA acceptance, providing practical insights for both researchers and practitioners. The findings enable organizations to move beyond technical implementation by addressing the human factors essential for successful MFA adoption.