Journey to Implement FIDO
summary
A global science company with ~60–80k users builds a self-hosted FIDO server and a credential self-service portal that uses phone SIM-based identity verification (via 2ID4) to register Windows Hello, Face/Touch ID and security keys. Plugins integrate FIDO into multiple IDPs, deploy discoverable credentials for username-less logins, and a detached authentication flow lets legacy webviews use FIDO so FIDO-only enforcement is possible. Pain points: incomplete WebAuthn support, passkey cloud sync surprises (iOS16), and need for decentralized identity.
AI-written summary · about
chapters (7)
- 0:00Introduction and team
- 1:24Cyber threats and FIDO solution
- 6:48Credential self-service portal
- 11:00Self-hosted FIDO infrastructure
- 16:25Implementation approach and rollout
- 19:16Hurdles and feedback for FIDO
- 23:09Summary and principles
related talks
25mFIDO Automotive applications
20mThe [pass] keys to success of FIDO2 Enterprise Adoption
23mBorderline: Examining the edge cases of FIDO
26mFIDO biometrics and passkeys for in-vehicle apps
24mAchieving strategic outcomes with FIDO: The phishing-resistant user
56mPasskeys 101: Technical Principles of FIDO
05m“You still use the password after all” – Exploring FIDO2 Security Keys in a Small
01h 14mWebAuthn: Theory and practice