Free EditionFIDO2 authentication is an open authentication standard developed by the Fast Identity Online (FIDO) Alliance, an industry consortium that aims to reduce reliance on passwords and improve the overall security of online authentication.
FIDO2 utilizes public key cryptography and ensures interoperability with various vendors' hardware, mobile authenticators, and biometric authentication methods, including facial recognition, on diverse browsers and operating systems. This enables passwordless authentication, facilitating smoother logins to numerous web services.
FIDO2 eliminates passwords and replaces them with native authentication mechanisms on users' devices, like Windows Hello and Apple TouchID, and portable security keys.
Alongside its ability to eliminate passwords, FIDO2 is recognized for its robust security standing, and here's why: All communication between the parties involved in FIDO2 authentication is done using public key cryptography. That is, instead of communicating the actual user-entered authentication secret—such as a PIN, an OTP, or biometric information—to the authentication server, a mathematically generated key corresponding to the secret is communicated. Simply put, user credentials are not shared between services. So, even if one service is compromised, the credentials cannot be used to access other services, making FIDO2 authentication resistant to phishing, replay, and manipulator-in-the-middle (MITM) attacks.
FIDO2 authentication is a secure, user-friendly, cost-effective, and more resilient substitute for traditional password-based authentication systems.
ManageEngine ADSelfService Plus supports FIDO2 authentication to secure access to cloud applications, OWA logins, and more. Using the WebAuthn API, ADSelfService Plus provides secure and customizable FIDO2 authentication, supporting both platform and roaming FIDO2 authenticators.
Configure your preferred username pattern.
Choose whether you want users to enroll using platform FIDO2 authenticators, roaming FIDO2 authenticators, or both.
Choose how many credentials users are allowed to enroll for FIDO2 authentication.
Generate comprehensive reports on users' FIDO2 enrollment status.
Instantly disenroll FIDO2 credentials for users upon detecting suspicious activities.
Employ filters to effortlessly locate specific users within a large pool of records.
Provide a simple, user-friendly console for hassle-free FIDO2 enrollment and authentication for your users.
ADSelfService Plus supports both platform and roaming FIDO2 authentication methods. Platform authenticators are those that are native to a computer or mobile device, and roaming authenticators are those that are portable and can be used for identity verification on any device. The following are the FIDO2 authentication methods that ADSelfService Plus supports:
FIDO2 securely eliminates passwords from the authentication equation and replaces them with native device authentication mechanisms.
User secrets are translated into encrypted keys using public key cryptography and are not exposed to the network.
Phishing, replay, and MITM attacks are repelled since attackers cannot obtain user credentials over the network.
Using ADSelfService Plus, users can enroll up to three FIDO2 credentials corresponding to different devices and platforms.
ADSelfService Plus provides customizable configuration controls for FIDO2, offering both single- and two-factor authentication options to protect sensitive resources.
Deploying FIDO2 authentication with ADSelfService Plus ensures compliance with regulatory standards such as the NIST Cybersecurity Framework, HIPAA, the PCI DSS, and the PSD2.
Enable context-based MFA with 19 different authentication factors for endpoint and application logins.
Learn moreAllow users to access all enterprise applications with a single, secure authentication flow.
Learn moreEnhance remote work with cached credential updates, secure logins, and mobile password management.
Learn moreEstablish an efficient and secure IT environment through integration with SIEM, ITSM, and IAM tools.
Learn moreDelegate profile updates and group subscriptions to end users and monitor these self-service actions with approval workflows.
Learn moreCreate a Zero Trust environment with advanced identity verification techniques and render your networks impenetrable to threats.
Learn more
