In 2019, strong customer authentication is expected to ramp up rapidly, driven by support from regulatory initiatives such as Payment Services Directive 2 (PSD2), industry standards such as those from FIDO Alliance and the World Wide Web Consortium (W3C) and also through platform vendors. But adoption will be limited without mechanisms to recover accounts when authenticators are lost. The entire ecosystem is only as strong as the weakest link, so account-recovery mechanisms and policies must be clearly defined. These approaches need to provide secure and acceptable user experiences. This document briefly summarizes recommended practices for all service providers (also referred to as Relying Parties or RPs), including banks and merchants.
MORE Implementation & Deployment
Cambridge Housing Authority’s Road to FIDO
The Challenge: At the Authenticate 2021 event, Jay Leslie, CIO...May 20, 2022
White Paper: Multi-Device FIDO Credentials
The FIDO standards, together with their companion WebAuthn specification, are...March 17, 2022
White Paper: Choosing FIDO Authenticators for Enterprise Use Cases
Secure access to online applications and services has evolved into...March 12, 2022