New: Native AD two-factor auth
Our latest release has the ability to push OTPs to Windows Active Directory. Use WiKID two-factor authentication for service and privileged accounts instead of sharing passwords and storing them in spreadsheets or vaults. Prevent pass-the-hash attacks and stop attackers from escalating to admin rights! See how to set it up.
Tell me more about WiKID
Unlike most tokens, which use shared secrets, WiKID uses public key cryptography. You can think of WiKID like PGP, but only PINs go to your server and only one-time passcodes are returned to the token. The two-factors are knowledge of the PIN and possession of the registered private key embedded in the token.
Between our support for standard authentication protocols such as RADIUS, LDAP and TACACS+, and our easy-to-use API, we know that WiKID will work in your environment.
See the Feature list for both the Enterprise Edition and the opensource Community Edition or view the complete .
For details on the encryption and other technical details, you can download our White Paper and other documents.
Will it work in my network?
YES. All remote access solutions support standard authentication protocols, especially RADIUS and so do we. If they don't support it directly, you can put it behind something that does. For example, RDP does not, but RDP gateway does. Wordpress does not, but Apache does.
While we recommend you use your equipment provider's documentation, we also provide a good number of tutorials for commercial and opensource solutions, including NPS, Cisco ASA, Checkpoint, PAM RADIUS, Apache and OpenVPN.
Are you wondering what's the best way to implement two-factor authentication in your corporate network? How to incorporate your directory - either Active Directory or LDAP for authorization while implementing one-time passcodes? See our registration-free pdf on adding two-factor authentication to your network.
Why no salespeople?
We like to focus on value-add. Not to say that good sales people don't add value, but we our focus is on product development, pre-sales engineering and support. The money we save we invest in the product and keeping the costs of two-factor authentication down.
The days of winning sales by having the best distribution are over. With our free-for-5 users approach, we are eliminating as much friction as possible in the sales cycle. You do not have to buy until after it is working in your environment. Then you only have to purchase a year's subscription. We have further reduced your risk and aligned our incentives: we both very much want a robust, trouble-free solution.