Case study - Enterprise PIV - authentication sans active directory
summary
Micro agency (<100 users) gets mandatory PIV logon on standalone Windows 10 laptops without Active Directory by combining Eid Authenticate (My Smart Logon credential provider) for smart‑card logon and Duo Federal (FedRAMP) with the Duo Windows logon client as a backup MFA. Default Duo accounts stay disabled so PIV works offline (revocation check bypassed); helpdesk flips accounts to active when cards are missing; remote admins use Duo MFA to reset local passwords. Implementation is per‑endpoint and manual but low cost and minimal ATO overhead.
AI-written summary · about
chapters (9)
- 0:00Start
- 4:33Personal Verification Card (PIV) Card Basics
- 20:36Duo Federal SaaS and Duo Win Logon Client Configuration
- 24:38User has PIV Card, Internet Available
- 25:48User has PIV Card, Internet Unavailable
- 26:45User's PIV Card Unavailable, Internet Available
- 29:07User's PIV Card Unavailable, User forget local account password
- 31:20User Login to Shared Workstation
- 33:05Solution Summary
related talks
49mGoing Passwordless for Employees: Secure Modern Authentication at Work
26mLessons from Kenvue's Passwordless Rollout Across 40K Users
30mWhere we’re going… we won’t need passwords
34mThe Web Authentication API - Imagine a World Without Passwords
43mPasswordless: a story of risk, protection and excellent UX
34mPasswordless: a story of risk, protection & excellent UX
07mEnhancing Cybersecurity with Enterprise Password Vaults (EPVs) for Financial Institutions...
44mWebAuthn: Strong Authentication vs Privacy vs Convenience