Implement FIDO2 for Cloud and SaaS
summary
Snowflake implements FIDO2 for cloud and SaaS MFA, integrating Okta SSO with Beyond Identity for passwordless sign‑on, using Touch ID, Windows Hello and U2F keys. A readiness scan shows ~75% native compatibility, ~10–15% unsupported, so rollout is phased: option first, then enforcement. Results after three quarters: near‑100% enrollment, ~60% of authentications using FIDO2 without enforcement, 97% of use cases protected, 87% reported UX improvement, and exceptional apps remain on an exceptions list while vendors are nudged to adopt FIDO2.
AI-written summary · about
chapters (10)
- 0:00Introduction and speaker intro
- 2:07Auth schemes evolution and FIDO2
- 5:39Phishing risks and FIDO2 benefits
- 8:50FIDO2 workflow and architecture
- 10:55Rollout challenges and phased approach
- 15:11Authenticator selection and app compatibility
- 16:56Phased enforcement and adoption metrics
- 19:23Enrollment process and results
- 21:31Key benefits and current status
- 23:17Lessons learned and Q&A
related talks
20mThe [pass] keys to success of FIDO2 Enterprise Adoption
23mEnhancing FIDO2 Security for Safety-Critical Applications: Best Practices and Consid...
24mAchieving strategic outcomes with FIDO: The phishing-resistant user
25mAuthentication and Beyond Using FIDO and Push Notifications
12minterviewed – Rich Smith
43mPasswordless: a story of risk, protection and excellent UX
33mNavigating Passwordless Authentication with FIDO2 & WebAuthn
01h 28mHow to 2FA-enable Open Source Applications