Technical articles, standards guidance, and community insight on IAM, PAM, and Zero Trust.
FIDO & PasskeysScope This guide explores the technical and operational steps for integrating passkey authentication into enterprise IAM systems, inspired by the UK Government Digital Service s rollout to 23 million
FIDO & PasskeysThe Challenge Microsoft Security Research has tracked a campaign since May where attackers compromised Microsoft 365 accounts by posing as IT helpdesk staff. These attacks succeeded because organizati
FIDO & PasskeysThe question at hand Andrew Shikiar s prediction at the Identity Policy Forum presents a key decision for security architects: should digital wallets replace passwords as your primary authentication m
FIDO & PasskeysScope This guide focuses on the technical and policy decisions you ll face when deploying a state-level digital identity scheme. It s designed for IAM architects evaluating standardized frameworks, FI
Get weekly security insights and compliance updates delivered to your inbox.
FIDO & PasskeysFinancial institutions are investing in deepfake detection tools, training staff to spot synthetic voices, and issuing warnings about AI-generated fraud. But these efforts often miss the mark. The FID
FIDO & PasskeysWhat Happened In August, Microsoft removed password support from its authenticator app while keeping passkey functionality. This wasn t a gradual shift. Microsoft eliminated a credential type that mil
FIDO & PasskeysThe Challenge Your organization needs to eliminate password-based attacks, but you re caught between two costly options: distributing hardware tokens to every user or continuing to rely on passwords,
FIDO & PasskeysPasskeys have effectively tackled phishing at the login stage. But what happens if an attacker hijacks a session twenty minutes after a user logs in? Or if a device is stolen mid-task? The question is
FIDO & PasskeysYour authentication policy likely treats passkeys and biometric liveness as separate controls. That s a gap. By unifying them in a single policy framework, you can tackle both credential phishing and
FIDO & PasskeysOver the past six months, half of UK IT leaders report their organizations now use passkeys. This isn t just a pilot phase, it s a full production deployment. With this shift, your team will face prac
FIDO & PasskeysOpenAI joined the FIDO Alliance in March 2025 and took a seat on its Board of Directors. This isn t just another tech partnership announcement. It signals that authentication frameworks built for huma
FIDO & PasskeysThe Challenge The National Cyber Security Centre (NCSC) faced a persistent authentication issue: traditional password guidance wasn t effective. Despite warnings against weak passwords and promoting p
FIDO & PasskeysScope This guide covers the technical fundamentals, implementation requirements, and operational considerations for deploying passkey authentication in enterprise environments. It s designed for IAM a
FIDO & PasskeysThe FIDO Alliance has announced two working groups focused on AI agentic commerce. If you re an IAM architect, you re likely fielding questions from product teams about allowing AI agents to transact
FIDO & PasskeysThe Conventional Wisdom With WebAuthn Level 3 now a W3C Recommendation, you might think it s time to roll out passkeys at scale. The standard is stable, features are robust, and major platforms have i
FIDO & PasskeysMicrosoft has made passkeys the default authentication method for Entra ID as of September 1. By February 1, 2027, SMS and voice authentication will be phased out. If you re an IAM architect planning
FIDO & PasskeysWhat Changed Amazon s passkey deployment has reached a significant milestone: 465 million customers now authenticate without passwords. This isn t a pilot program or an obscure option. It s the defaul
FIDO & PasskeysYou re getting questions about passkeys. Your security team wants to know if they re ready. Your developers are asking how they work. Your CISO is asking what happens to your existing MFA stack. These
FIDO & PasskeysWhat Happened The authentication model that s protected enterprise systems for two decades has hit a breaking point. Organizations have treated identity verification as a one-time event: check credent
FIDO & PasskeysMicrosoft s decision to make passkeys the default authentication method in Entra ID and Google s integration of FIDO2 security keys for Google Workspace users Windows login marks a pivotal shift in en
