Product Updates

Optimize Authentication Flexibility with TrustBuilder’s FIDO Integration

February 21, 2025

5 minutes

With the integration of FIDO authentication standards, TrustBuilder expands its authentication options, providing a broader range of phishing-resistant and passwordless solutions. This new feature allows you to choose the most suitable authentication method for each user—whether hardware security keys, software-based authenticators, or browser-based access—all managed from a centralized platform.

What is FIDO authentication standards?

FIDO (Fast Identity Online) authentication standards are a set of open and interoperable authentication protocols developed by the FIDO Alliance to improve online security and eliminate the reliance on passwords. The main goal of FIDO is to provide a secure, passwordless authentication method that is resistant to phishing, credential theft, and replay attacks.

Expanded Authentication Options

By integrating FIDO, TrustBuilder allows you to offer a wide range of authentication methods for your users. In addition to TrustBuilder Authenticator (available on mobile, desktop, and as a browser-based token), you can now leverage physical security keys (like YubiKeys) or passwordless solutions such as embedded platform authenticators and Windows Hello, all part of FIDO standard compliant authenticators.

Furthermore, FIDO support in TrustBuilder.io can now be used as an additional factor for Single Sign-On (SSO)-enabled applications. This variety gives you the flexibility to choose the right authentication method for each user group based on the sensitivity of the access and your organization’s security needs.

Flexible and Centralized Access Management

Once you’ve selected your preferred authentication methods, TrustBuilder simplifies the management process with centralized, flexible control via the TrustBuilder.io platform. You can easily configure specific access rules and manage the different authentication options for each user constituency, without switching between multiple interfaces. The platform allows you to adjust authentication policies based on access levels and data sensitivity, while maintaining full control over the process.

For example, organizations may choose to deploy FIDO tokens (such as YubiKeys) for users who prefer a hardware-based solution or share FIDO authenticators across Service Providers/Applications. Meanwhile, others may rely on TrustBuilder Authenticator (available on mobile, desktop, and browser-based options), offering equivalent phishing-resistant security and a cost-effective option for larger groups. This approach can all be managed in a centralized, hassle-free manner.

In scenarios where deploying hardware keys universally isn’t practical, TrustBuilder Authenticator provides a robust phishing-resistant alternative, ensuring security remains uncompromised. This mix-and-match approach allows organizations to align their authentication methods with user preferences and access requirements, all managed seamlessly through a centralized interface.

Benefits of TrustBuilder’s FIDO Integration

Total Flexibility: Choose the appropriate authentication method based on user constituency (FIDO or software), and adjust this configuration as needed.
Cost Reduction: Minimize the deployment of expensive physical FIDO keys by applying them only to some users, while keeping costs under control for others.
Simplified Management: Manage all your authentication methods from a single interface, streamlining administration and simplifying the enforcement of access policies.
Autonomous Key Registration: Users can independently register and manage their FIDO keys via a self-service portal, simplifying the process and reducing administrative burden.
Progressive Adoption: Roll out FIDO gradually, starting with a smaller percentage of users, while keeping the rest on software tokens.

The integration of FIDO into TrustBuilder delivers a flexible and easy-to-manage authentication solution for your users. With this new feature, you can tailor your authentication methods based on your organizational needs, all while centralizing management in a single, efficient platform.

Looking to expand your authentication options to FIDO standards?

Let’s Talk

Frequently Asked Questions

Find your answer to common questions on this topic.

What types of FIDO authentication does TrustBuilder support?

TrustBuilder supports a comprehensive range of FIDO authentication methods, ensuring security and flexibility for different user needs. These include physical security keys like YubiKeys, passwordless solutions such as embedded platform authenticators, and Windows Hello, all part of FIDO standard compliant authenticators.

Can organizations mix TB FIDO authentication with other authentication methods?

Yes, organizations can combine TB FIDO (with security keys and passwordless solutions) with other authentication methods, including software-based authenticators like TrustBuilder Authenticator. This flexibility allows organizations to tailor authentication policies based on user needs, security requirements, and cost considerations.

How does TrustBuilder help manage different authentication methods?

TrustBuilder provides a centralized and flexible management system through the TrustBuilder.io platform, allowing organizations to configure, monitor, and enforce authentication policies efficiently. Administrators can customize authentication rules based on user roles, access sensitivity, and security requirements. With seamless integration of FIDO authentication methods such as security keys and Windows Hello alongside software-based authenticators, organizations can tailor their security approach to different user groups. The platform also enables adaptive authentication, allowing adjustments based on risk levels, device trust, and contextual factors. By managing all authentication options from a single interface, TrustBuilder simplifies administration, reduces complexity, and ensures a secure yet user-friendly authentication experience.

What is the difference between FIDO and FIDO2?

FIDO is the umbrella term for all authentication standards developed by the FIDO Alliance, designed to enhance security and reduce reliance on passwords. It includes protocols like UAF (enabling passwordless authentication) and U2F (used as a strong second factor). FIDO2, as part of this broader standard, is the latest iteration, introducing WebAuthn and CTAP to enable fully passwordless authentication directly in browsers and across devices. Unlike earlier FIDO protocols, FIDO2 allows users to authenticate using biometrics, built-in platform authenticators, or external security keys without needing a password.

Content Hub