FIDO Government Deployments and Recognitions
Governments around the world are recognizing and deploying FIDO! Clicking on the countries / regions below provides information on how government agencies have deployed FIDO certified solutions for use by employees and/or citizens in government programs (these entries are noted as “deployments). This page also includes government agencies that have recognized and included references to FIDO standards in policy documents and/or regulations pertaining to online authentication (these entries are noted as “recognitions”). Please check back frequently as this page will be updated as new recognitions and deployments roll out.
Government Agency
Description:e-government services (authentication and transaction signing) for the national cyber security services and management. Involves government, city council and selected industry such as bank, telco, transport and etc.
Norwegian healthcare sector
Description:Targeting the pharmacies, and it is mainly built on Windows technology. The FIDO authenticator is used by the pharmacist to login to her account at the Windows workstation, which gives access to the proper applications and systems. This system is in production at one pharmacy group.
HelseNorge
Description:Providing mobile authentication solutions for the medical staff. In this case, FIDO is used as authentication solution using Android and Apple iOS smartphone apps. This will be tested and evaluated in a proof of concept during the rest of 2020.
Ministry of Interior
Program:Taiwan FidO
Description:Taiwan FidO is a mobile authentication service deployed by Ministry of Interior. The citizen can register Taiwan FidO service with personal citizen certificate, and log in to many e-government services using the registered Taiwan FidO account.
Electronic Transactions Development Agency (ETDA)
Program:“Development and Installation of Registration System on Mobile Devices for Use as Authenticator (TOR released in August 2020)”
Description:ETDA is developing a FIDO UAF system which will provide enterprise or organizations as an reference to deploy their mobile authentication application.
FIDO Technology: FIDO2
National Health Service
Program:NHS Identity Authentication Service
Description:NHS Identity currently authenticates against around 1 million care worker identities in its repository; registered and checked to a high level of confidence several new methods of verifying the subject, such as one time passwords, push notifications, knowledge based secrets, biometric touch id, Windows Hello, cryptographic certificates, FIDO2 supported devices and OIDC Smartcards
Cabinet Office, Government Digital Service
Program:GPG 44 – Using authenticators to protect an online service
Description:The U.K.’s Government Digital Service published updated guidance, Using authenticators to protect an online service (GPG 44). Following NIST, the term ‘credential’ has been replaced with “authenticator”. Transaction monitoring is noted and “High Quality Authenticators” is defined if it has been independently tested to prove it meets industry standards, such as the Common Criteria guidelines, FIDO or FIPS 140-2.
Australian Signals Directorate (ASD)
Program:ASD “Essential Eight”
Description:MFA is one of 8 critical controls recommended. MFA section list “U2F Security Keys” as one recommended technology and directs implementers to use FIDO-certified keys – and links to the FIDO certification site.
FIDO Technology: FIDO2
CZ.NIC
Program:MojeID
Description:CZ.NIC is the DNS registry in the Czech Republic and they operate the national identity provider called mojeID with 700,000 users. In August 2020, the Czech CZ.NIC received accreditation from the Czech Ministry that their IdP mojeID with support for FIDO is approved as eIDAS eID scheme on Substantial level for services integrated with Czech eGovernment system. In September 2020, they launched their service in full production.
General Services Administration
Program:Login.gov
Description:US system for single sign-on across different agency applications. Use of FIDO is one option.
National Cybersecurity Center of Excellence
Program:Mobile Single Sign-On for Public Safety/First Responders
Description:NIST Cybersecurity Practice Guide demonstrates how commercially available technologies, standards, and best practices implementing SSO, identity federation, and MFA can meet the needs of public safety first responder communities when accessing services from mobile devices.
NIST
Program:Digital Identity Guidelines: Implementation Resources for SP 800-63-3
Description:July 2020 publication highlights use of FIDO in meeting AAL2 requirements for single factor cryptographic
Office of Management & Budget
Program:Implementation of OMB memo M-19-17 – FICAM Policy
Description:Update policy includes: Innovate capabilities and update Federal Public Key Infrastructure (PKI)27 to provide government with a trust framework and infrastructure to administer digital certificates and other authentication solutions, such as those based on public key cryptography. This includes updating the PKI shared service provider approach to enable strong government oversight of service providers, including procurement and cost controls through GSA acquisition solutions as applicable
Drug Enforcement Administration
Program:Electronic Prescribing of Controlled Substances
Description:April 2020 Request for Information included questions about FIDO U2F.
Questions on this webpage? Email [email protected]
