product-logo

StrongKey FIDO Server

See all products by this partner 
badge-icon

StrongKey FIDO Server (SKFS) makes phishing-resistant passwordless authentication affordable for organizations of all sizes: it is the world’s only open-source, enterprise-grade, FIDO® Certified Server to eliminate passwords from web and mobile applications. SKFS functions as an identity provider (IDP) within a single sign-on environment that leverages SAML and/or JWT tokens for authorizing strongly authenticated users to web applications.

StrongKey Sign-On (SKSO) is a purpose-built web application designed to support the registration and management of FIDO credentials with SKFS, as well as inter-operate with Citrix ADC and Citrix Gateway for single sign-on to Citrix environments using SAML Assertions.

Combined, SKFS + SKSO eliminate passwords for Citrix/SAML environments delivering NIST AAL-3 authentication per NIST Special Publication 800-63 Digital Identity Guidelines without the need for Authenticator Apps.

Request Information

StrongKey supports customers on 6 continents with its fully U.S. based team. We offer Mission Critical (24/7) or Business Hour support contracts, based on customer requirements.

Compatibility

  • down-arrow Citrix ADC
    13.1 VPX

Product Details

StrongKey, a company with 21+ years in strong authentication experience with public-key cryptography, developed its first FIDO server in 2015 and received FIDO certification the same year. The current FIDO2 server was built and FIDO Certified in 2018.

Its enterprise features far exceed any other FIDO server on the market; yet its open-source licensing eliminates per-seat costs. Designed with some of the highest levels of security and privacy, SKFS is for serious security professionals who understand where vulnerabilities lurk within the authentication infrastructure and are willing to go against the crowd to ensure their company and users are secure.

Screenshots

screenshot screenshot

Features

  • Out-of-the-box integration with Citrix Application Delivery Controller (ADC) and Citrix Gateway

  • Authenticator agnostic: use any FIDO® Certified Authenticator you already own that supports the FIDO2 protocol, including those built into current laptops, desktops, tablets and smart phones.

  • Built-in Single Sign-On (SSO) with SAML and JWT tokens, eliminating the need for a third-party SSO service or software

  • The highest authentication assurance when used with the appropriate FIDO Authenticator: Authentication Assurance Level-3 (AAL-3) compliance

  • Policy module for enforcing security policy outside web/mobile applications

  • FIPS 140-2 Level-2 (standard) or Level-3 (optional) cryptographic hardware modules to protect SKFS from side-channel attacks

  • Easy integration for web/mobile applications via REST or SOAP web services – with lots of sample code to make it easier

  • Enterprise ready: High Availability/Disaster Recovery built in via clustered architecture at no additional cost

  • Transaction Confirmation for digitally signed business transactions for Android devices

  • Integration with LDAP or Active Directory

  • Integration with PKI

Advantages

  • The industry’s strongest authentication protocol that completely eliminates password phishing attacks

  • Eliminates 3rd party SSO tools to lower costs and complexity within the application architecture

  • Eliminates man-in-the-middle (MITM) privacy compromises and liability