MyID Authenticate
Give every user a faster, safer way to sign in. MyID® Authenticate delivers phishing-resistant FIDO authentication for Windows and third-party applications, with quantum-ready security and greater control over your data. Deploy it on your terms to support your digital sovereignty requirements, and integrate it with MyID CMS when you also need high-assurance credential management.
Phishing-resistant sign-in, built on FIDO
MyID Authenticate makes strong authentication simple, delivering phishing-resistant FIDO authentication for Windows and third-party applications. Protect against credential-based attacks, retain control over your authentication data to support digital sovereignty requirements, and stay ready for the quantum era.
FIDO Authentication
Standards-based FIDO2 passkeys, using security keys or tokenless options, deliver strong, phishing-resistant authentication while reducing reliance on passwords and vulnerable shared secrets.
Phishing-resistant by Design
Origin-bound cryptographic authentication helps protect against phishing and credential theft. No shared secrets are sent, and credentials cannot be used by fraudulent sites.
Secure Windows Logon
Extend strong, phishing-resistant authentication to the Windows desktop, protecting workstation access with the same FIDO technology used across your environment.
Crypto-agile and Post-quantum Ready
Designed to support post-quantum cryptography, helping you protect authentication for the future and adapt as cryptographic standards and threats evolve.
Works with Your Applications
Connect cloud, web and third-party applications using SAML 2.0 and OpenID Connect, with RADIUS support for VPN and network access.
Integrates with MyID CMS
Pair MyID Authenticate with MyID CMS to issue and manage high-assurance credentials alongside FIDO authentication, providing a broader approach to enterprise credential management.
Deploy on your terms
Strong, modern authentication without re-architecting your identity infrastructure.
On-Premise
Full control of your authentication service, on your own infrastructure.
- Runs on your own servers
- Supported servers: Windows Server 2022 and 2025
- Keep authentication and data inside your environment
- Supports data sovereignty requirements
Cloud
Host MyID Authenticate on the cloud platform of your choice.
- AWS, Azure, private cloud and more
- Deploy on the cloud platform you already use
- Standalone, no dependency on a particular directory or identity provider
- Scale with your workforce
Scriptable Roll-out
A PowerShell-based installer built for enterprise deployment processes.
- Scriptable, repeatable installation
- Automated, consistent deployments
- Fits established change processes
- No wholesale transformation of existing identity infrastructure
Technical specifications
Authentication Server
- Windows Server 2022 / 2025
- SQL Server or PostgreSQL
- Dedicated MyID Authenticate database
- PowerShell installer (interactive or scripted)
- Optional load balancer in front of authentication servers
- Event codes to the Windows Event Log
Auth Methods
- FIDO2 passkeys (device-bound + synced)
- FIDO2 security keys
- Mobile Push with biometrics (with fatigue protection)
- OATH TOTP
- YubiKey and OneSpan Digipass
- Pattern Grid (4x4 up to 6x6)
- One Time Code by SMS or email
Protocols and Integration
- SAML 2.0 (enterprise SSO)
- OpenID Connect
- RADIUS (via NPS and FreeRADIUS)
- SCIM user provisioning
- Microsoft Entra ID and Microsoft 365 federation
- Web Services API
Desktop Agent
- Windows 10 / 11
- Passkey Windows Logon
- Online and offline logon (encrypted cache)
- Locks when the security key is removed
- User auto-selected on FIDO key insertion
RADIUS Targets
- RADIUS (via NPS and FreeRADIUS)
- VPN integration via standard industry protocols
- Any RADIUS-compliant VPN or network device
Directory
- Directory independent, none required
- Accounts and attributes provisioned via SCIM
- Onboard users from Active Directory or another data source
- User information held in the MyID Authenticate database
- Self-service enrolment, up to 10 devices
- Browser-based Web Management Portal
Sign-in that works everywhere your users do
Standards-based FIDO2 passkeys, using security keys or tokenless options, deliver strong, phishing-resistant authentication across your environment.
Protect Windows workstation access with strong FIDO authentication, giving users a simple and secure way to sign in.
Use hardware security keys where a physical factor is required, or tokenless authentication where greater flexibility and convenience are needed.
Designed to support post-quantum cryptography, helping you prepare your authentication and cryptographic infrastructure for evolving threats and standards.
Connect cloud, web and third-party applications using SAML 2.0 and OpenID Connect for secure, convenient access.
Extend phishing-resistant authentication to VPNs and network devices with RADIUS support.
Built around recognised industry standards to reduce dependence on proprietary approaches and support interoperability across your environment.
Deploy on-premise or in the cloud to support your data sovereignty requirements, with a scriptable PowerShell installer for fast, repeatable roll-out.
Common questions
Everything you need to know about MyID Authenticate.
MyID Authenticate is a new FIDO authentication solution from Intercede. It delivers phishing-resistant authentication for Windows and third-party applications, and is designed to support post-quantum cryptography.
FIDO passkeys use cryptographic challenge-response that is bound to the legitimate origin. No shared secret is transmitted, so there is nothing for a phishing site or adversary-in-the-middle to capture and replay.
Yes. MyID Authenticate provides Passkey Windows Logon on Windows 10 and 11, so users sign in with a passkey instead of a password.
Cloud, web and third-party applications through SAML 2.0 and OpenID Connect, and VPNs and network devices through RADIUS, alongside Passkey Windows Logon.
On-premise on Windows Server 2022 and 2025, or in the cloud on AWS, Azure, private cloud and more, to support your data sovereignty requirements. It installs with a scriptable PowerShell-based installer.
It is crypto-agile, combining established authentication technologies with post-quantum cryptography (PQC) capabilities, so you can prepare your authentication and cryptographic infrastructure for the quantum era.
MyID Authenticate integrates with MyID CMS. Use MyID CMS to issue and manage high-assurance credentials such as PKI smart cards, and MyID Authenticate for phishing-resistant FIDO authentication.
Yes. Existing MyID MFA customers can migrate to MyID Authenticate using the MyID Authenticate Migration Tool, with support from our specialists. Talk to your account team to plan your move.
A clear migration path from MyID MFA to MyID Authenticate.
Existing MyID MFA customers can move to phishing-resistant, post-quantum ready FIDO authentication using the MyID Authenticate Migration Tool, with specialist support at every step.
- 1Talk to your account teamReview your current MyID MFA deployment and goals
- 2Plan with our specialistsMap users, applications and authenticators to MyID Authenticate
- 3Migrate your MyID MFA installationMove across using the MyID Authenticate Migration Tool
- Plan your migration →