
Oleksii Leonov
Chief Security Engineer (IAM), Hideez
Expertise: Identity and access management, FIDO authentication, threat prevention
Oleksii Leonov is the Chief Security Engineer for identity and access management (IAM) at Hideez. He writes about identity technologies such as SAML and LDAP, FIDO authentication and threat prevention.
Articles by Oleksii Leonov · Total: 29
-
Access
Hospital Access Management: The Complete Guide to Protecting Patient Data, Clinical Workflows, and Regulatory ComplianceHospital access management governs who enters clinical spaces, who logs into EHR systems, and who can view or modify patient records — across every role, shift,...Read more
-
Access
On-Premises SSO in Hybrid Environments: A Vendor-Neutral Architect's Guide to Protocols, Passwordless, and ComplianceA protocol-by-protocol guide for architects deploying single sign-on across hybrid AD environments without ADFS or Entra ID P1/P2. Covers Kerberos, SAML, OIDC, and FIDO2 decision criteria,...Read more
-
Access
Offline MFA Explained: How to Enforce Phishing-Resistant Authentication When Users Have No InternetOffline MFA enforces a second factor locally on the device — no network, no authentication server, no fallback to cached passwords. This guide compares TOTP and...Read more
-
IAM
Workforce Authentication Explained: A Pragmatic Guide to Securing Employees, Frontline Workers, and Privileged UsersWorkforce authentication verifies every employee, contractor, and admin identity inside your perimeter — and stolen credentials still fuel 22% of breaches per the 2025 Verizon DBIR....Read more
-
IAM
Track User Logon Logoff in Active Directory: The Complete Guide for Modern Hybrid EnvironmentsTracking user logon and logoff in Active Directory: GPO setup, the seven event IDs that matter, PowerShell scripts that query every DC, WEF + SIEM for...Read more
-
Passwordless
Passwordless Workforce Authentication: A Practical Deployment Guide for Mid-Market and Enterprise IT LeadersVerizon's 2025 DBIR shows 22% of breaches start with stolen credentials and 88% of web-app attacks rely on them — and standardizing on a single authenticator...Read more
-
IAM
Workforce Identity and Access Management: The Passwordless-First Blueprint to Eliminate Credential-Based BreachesStolen credentials drive 22% of all breaches and 88% of basic web-app attacks (Verizon DBIR 2025). This guide walks security and IT leaders through a passwordless-first...Read more
-
Security solutions
Microsoft Authenticator: Setup, Key Features & Alternatives (2026)Microsoft Authenticator is a mobile app that replaces SMS-based verification with secure, device-based authentication. It supports time-based one-time passwords, push notifications, and passwordless sign-in using biometrics...Read more
-
Access
How to Enable Windows 11 Auto Login | Key Methods & TipsWindows 11 supports several auto-login methods, each with different security implications. Before enabling the feature, users must disable Windows Hello options such as PINs and biometrics....Read more
-
IAM
Top IDaaS Solutions and Implementation TipsIn today’s digital world, Identity as a Service (IDaaS) is essential for securing enterprise access while simplifying authentication. This guide explores the best IDaaS solutions, covering...Read more
-
IAM
What Is IDaaS? Ultimate Guide to Identity as a ServiceIdentity as a Service (IDaaS) is a cloud-based approach to managing user identities and access that replaces traditional on-premises identity systems. As remote work and distributed...Read more
-
Tips
Business Workflow Management: Streamline Processes and Boost ProductivityBusiness workflow management optimizes tasks and processes to boost efficiency, collaboration, and scalability. By automating repetitive work, companies can reduce errors, save time, and free teams...Read more
-
Security solutions
EHR vs EMR: understanding the key differences for better healthcare decisionsEMRs (Electronic Medical Records) are digital versions of paper charts used within a single healthcare practice, while EHRs (Electronic Health Records) are designed for interoperability, enabling...Read more
-
Security solutions
Keycloak Alternatives: Top Solutions for Identity and Access ManagementKeycloak is a powerful open-source IAM platform but suffers from complex deployment, outdated documentation, and lack of native phishing-resistant authentication. Organizations seeking more streamlined and scalable...Read more
-
Security solutions
Bitwarden vs 1Password: A Complete Feature and Value ComparisonBitwarden and 1Password are two leading password managers offering different approaches to security, usability, and pricing. This guide compares their encryption standards, authentication methods, cross-platform compatibility,...Read more
-
Tips
How to Fix Bluetooth Connection ProblemsBluetooth connection issues can disrupt productivity, whether it's failed pairings, audio stuttering, or sudden disconnections. This guide provides step-by-step solutions for troubleshooting Bluetooth problems across various...Read more
-
Passwords
How to Change Your Facebook Password: A Complete Guide for All DevicesWhether you're concerned about potential security breaches, have forgotten your current password, or simply want to update it as a precautionary measure, changing your Facebook password is...Read more
-
Tips
How to Change Gmail Password: A Step-by-Step GuideChanging your Gmail password regularly is crucial for maintaining the security of your account. Whether you're using a smartphone, tablet, or computer, Google provides simple strategies to...Read more
-
Access
Next-Gen Smart Card Authentication: How Does FIDO Authentication Enhance Traditional Smartcard Logins?In today's rapidly evolving digital landscape, the protection of sensitive information has become increasingly crucial. As traditional authentication methods struggle to keep pace with evolving threats,...Read more
-
Threats
Vishing Explained: What are Vishing and Smishing?When your phone rings and you see a number you’re not familiar with, you can’t tell who’s on the other side unless you answer. But, doing...Read more
-
Access
What is LDAP authentication? LDAP vs SAML Both the Lightweight Directory Access Protocol and the Security Assertion Markup Language (LDAP and SAML) are widely used access and authentication protocols, often used for applications,...Read more
-
Access
Active Directory vs LDAP. What LDAP is used for? For managed services providers (MSPs), Active Directory and Lightweight Directory Access Protocol (AD and LDAP) are so common and familiar that they rarely bother to discuss...Read more
-
Threats
What Does Spoofing Mean? Detection & PreventionSpoofing is a catch-all term that covers many different types of malicious behaviors in which the attackers try to trick unsuspecting victims in order to obtain...Read more
-
Passwordless
Hideez Enables Passwordless Access to Enterprise Services with Endpoint Biometric sensor to Enhance its FIDO ServerHideez Group has rolled out a new 3.8.6 version of the Hideez Authentication Server, which allows passwordless access with different types of FIDO authenticators. A demo version of the updated server...Read more
-
Access
SAML Basics: What is SAML And How Does It Work?SAML authentication is a widely used method that makes all of our lives easier. But, most online users don’t know how SAML works or what it...Read more
-
Regulations
California Consumer Privacy Act 2020. What You Need to Know?The California Consumer Privacy Act is effective on January 1st, 2020. This means that, in a little less than two months, California will be the first...Read more
-
IAM
What is Identity Management? Enterprise Identity Management SolutionsCybersecurity has come a long way in the past two decades. So much so that proper identity management practices have become a basis for strong cybersecurity...Read more
-
IAM
Hideez is a SAML 2.0 Identity ProviderHideez SAML Identity Provider complements the Hideez Enterprise Server with new capabilities. The IdP uses HES identity store enabling authentication and providing federation for service providers...Read more
-
Hideez SAML Identity Provider for CyberArk PVWACyberArk is a publicly traded information security company offering Privileged Account Security. CyberArk delivers the industry’s most complete solution to reduce the risk created by privileged...Read more




























