Ping Identity, Yubico, and EntryPoint Team Up to Bring Zero Trust to FIDO2 with Derived FIDO2 Credentials
Ping Identity (NYSE: PING) has collaborated with Yubico and EntryPoint to offer a no-code solution that delivers phishing-resistant Derived FIDO2 Credentials (DFCs) and centralized identity management for the US Federal Government.
This partnership enables enhanced security protocols that fulfill recent government requirements for multi-factor authentication. The solution incorporates Yubico's hardware security keys and EntryPoint's credential management, reinforcing organizational cybersecurity by minimizing risks associated with MFA vulnerabilities.
- Partnership with Yubico and EntryPoint enhances cybersecurity for US Federal Government.
- Offers phishing-resistant Derived FIDO2 Credentials supporting Zero Trust principles.
- No custom coding required for implementation, ensuring rapid deployment.
- None.
The no-code solution offers phishing-resistant authenticators, identity proofing, and centralized identity management for the US Federal Government
DENVER, June 9, 2022 /PRNewswire/ -- Ping Identity (NYSE: PING), the intelligent identity solution for the enterprise, Yubico, the leading provider of hardware authentication security keys, and EntryPoint, a premier credential management platform, partnered on a joint solution that enables phishing-resistant Derived FIDO2 Credentials (DFCs) along with identity proofing and centralized identity management.
"Phishing-resistant MFA is an immediate priority for enterprises and is now a specific requirement for the U.S. government," said Andre Durand, CEO and founder of Ping Identity. "By incorporating enterprise-grade federation and access controls into this joint solution, organizations can easily use Derived FIDO2 Credentials to enhance the security of virtually any individual or asset — regardless of location."
The standards-based solution works off-the-shelf with no custom coding required, including:
- Yubico's YubiKey 5 Series and YubiKey 5 FIPS Series: phishing-resistant, hardware-based authentication security keys that support FIDO2
- EntryPoint's credential management system of identity proofing and binding capabilities
- Ping Identity's authentication authority with federated identity and centralized identity management and policy enforcement
The solution allows organizations to establish and prove organizational attestation of FIDO2 hardware tokens, allowing them to better protect themselves against multi-factor authentication (MFA) exploits.
By enabling organizational attestation with FIDO2 security keys, the solution applies the Zero Trust concept of "trust nothing, verify everything" to FIDO2-based MFA. This minimizes the risk of cyber attackers using outside credentials to penetrate a business network — a common vulnerability known to be exploited by nation-state threat actors.
"Proof-of-possession isn't enough," said Eric Hildre, president of EntryPoint, Inc . "With the addition of our identity binding capabilities, organizations can now confirm that the Derived FIDO2 Credential is in use by the intended user and not a malicious actor."
"Recently, OMB Memo M-22-09 was released citing FIDO2 and WebAuthn, as well as PIV, as approved phishing-resistant credentials that meet the EO requirements," said Jeff Frederick, Director, Solutions Engineering at Yubico. "This partnership supports these government regulations and enables agencies to trust and verify that the FIDO2 security keys in their environment could only have come from their authorized supply chain, and nowhere else."
For more information, please see the solution brief.
As the inventor of the YubiKey, Yubico makes secure login easy and available for everyone. The company has been a leader in setting global standards for secure access to computers, mobile devices, and more. Yubico is a creator and core contributor to the FIDO2, WebAuthn, and FIDO Universal 2nd Factor (U2F), and open authentication standards. YubiKeys are the gold standard for phishing-resistant multi-factor authentication (MFA), enabling a single device to work across hundreds of consumer and enterprise applications and services. Yubico is privately held, with a presence around the globe. For more information, please visit www.yubico.com.
EntryPoint is the premier Identity and Access Management (IAM) solution for customers deploying smart card based identity credentials. With solutions deployed world-wide since 2006, Technology Industries is a leader in strong, multi-factor authentication access to buildings and networks. For more information, visit www.entrypoint.io.
At Ping Identity, we believe in making digital experiences both secure and seamless for all users, without compromise. That's digital freedom. We let enterprises combine our best-in-class identity solutions with third-party services they already use to remove passwords, prevent fraud, support Zero Trust, or anything in between. This can be accomplished through a simple drag-and-drop canvas. That's why more than half of the Fortune 100 choose Ping Identity to protect digital interactions from their users while making experiences frictionless. Learn more at www.pingidentity.com.
Ping Identity Media Relations
Megan Johnson
press@pingidentity.com
+1 (757) 635-2807
View original content to download multimedia:https://www.prnewswire.com/news-releases/ping-identity-yubico-and-entrypoint-team-up-to-bring-zero-trust-to-fido2-with-derived-fido2-credentials-301564487.html
SOURCE Ping Identity Corp.
FAQ
What is the new solution announced by Ping Identity on June 9, 2022?
How does the partnership support US government cybersecurity requirements?
What are Derived FIDO2 Credentials (DFCs)?
What does the Zero Trust concept entail in this solution?
