Roaming users are users who regularly access systems and applications from multiple locations, devices, or networks instead of a single fixed workstation. Roaming behavior has become common in modern environments where users work remotely, travel frequently, or rely on personal devices and cloud-based services. As noted by the U.S. Bureau of Labor Statistics, "In the first quarter of 2024, 35.5 million people teleworked or worked at home for pay, up by 5.1 million over the year."

Identity and Access Management Considerations

Roaming users introduce variability into authentication and access patterns. Unlike office-bound users, a roaming user's IP address and geographic location can frequently change. This means they may connect from untrusted networks, resulting in a greater reliance on SSO and cloud-based identity providers. This can increase exposure to several threats:

• Phishing and Credential Threat
• Session Hijacking
• Device Compromise

Because of this, organizations typically use stronger verification policies to safeguard private systems and applications:

• Multi-Factor Authentication (MFA)
• Conditional Access Policies - dynamic evaluation of login context (IP address, geographic location, network trust level, time of access, etc.)
• Device Trust Checks - device enrollment and compliance status
• Risk-based Adaptive Authentication - stronger authentication methods needed for higher risk sessions