HIGHLIGHTS
Intelligent passwordless authentication. Adaptive, policydriven controls dynamically adjust security based on authenticator strength and device context for unmatched flexibility and compliance.
Easy migration to passwordless. Gradually adopt passkeys and modern methods while continuing to support existing methods like OTP and MFA.
Secure, frictionless access. Prevent account takeover with phishing-resistant passkeys and passwordless login experiences that work seamlessly across devices, apps, and channels.
Fraud-aware protection. Strengthen defenses with device health checks, contextual risk signals, and friendly-fraud detection, beyond credential security.
Enterprise-grade, scale & integration. Proven to handle millions of authentications while integrating easily with IAM platforms and enterprise applications.
Simpler logins, stronger security — powered by passkeys and beyond. Passwords remain one of the leading causes of breaches, driving up costs for organizations and frustration for users. Passkeys, based on FIDO (Fast Identity Online) standards, provide a stronger, simpler alternative by turning devices people already use into secure authenticators.
DigipassONE Authenticate helps organizations move beyond passwords with phishing-resistant passkeys, while also supporting a broad range of modern authentication methods including Microsoft Quick Authentication, intelligent passwordless authentication, out-of-band methods, OTP, and Secure Payment Confirmation.
With adaptive policies, device and risk awareness, and deep integration with leading IAM platforms, the software ensures security and usability work together in real-world environments.
The portfolio includes:
- DigipassONE Server
- DigipassONE Mobile SDK
- DigipassONE Web SDK
These are also available as a delivery option through DigipassONE Cloud for organizations that prefer cloud-based deployment.
Enterprises can adopt passkeys and modern methods while continuing to leverage existing OTP and MFA solutions, giving them flexibility to modernize at their own pace and scale.
FEATURES
Adaptive rulesets
Code-independent policy supports registration and authentication. Policies can combine multiple signals, including SDK-generated signals, contextual information, and third-party risk data. Flexible sequences avoid unnecessary prompts (e.g., first-time device use, high-value transactions, or untrusted devices)
Authentication methods
- Passkeys and FIDO protocols (UAF, U2F, FIDO2/WebAuthn)
- Synced and device-bound passkeys for varying assurance requirements
- Quick Authentication and intelligent passwordless authentication
- Autofill, Conditional UI, Conditional Create, and custom authenticator names
- Attestation and FIDO Metadata Service support
- Out-of-band authentication (QR codes, push, app-less)
- Secure Payment Confirmation (SPC) and PSD2-SCA
- OTP (email, SMS) and ID verification through third-party services
Device & risk signals
Device health, model, type, manufacturer, OS version, SDK version, IP address, location, velocity, Wi-Fi network, device “on-call,” and friendly fraud detection. Supports contextual integration with third-party risk engines and behavioral biometrics.
Administration & lifecycle management
Web-based console for policy management, import/export, and analytics. Role-based admin permissions. Supports onboarding, recovery, suspension, and deprovisioning with tamper-evident logs for compliance.
Analytics & reporting
- Detailed statistics on authentication adoption, device usage, transactions, and deregistrations. Tamper-evident audit logs for compliance reporting.
- Integration & extensibility
- REST APIs, JWT authorization, and plugin support (e.g., session management, crypto). Out-of-the-box integration with Keycloak, Microsoft Azure B2C, and PingFederate.
Deployment options
- Cloud or on-premises deployment with container support (Docker, Kubernetes). Available as FedRAMP High and DoD IL5 service (via UberEther).
"Traditionally, one of the biggest challenges of authentication systems has been to balance security with user experience. Due to the FIDO standard, both elements work together seamlessly to provide the highest security standards, along with a transparent and agile user experience."
- Financial services executive
DigipassONE Authenticate — For Passkeys Version 10.1 technical details
Cloud platforms
- AWS, Microsoft Azure, Google Cloud Platform
Operating systems
- Rocky Linux 9, Red Hat Enterprise Linux 8/9, Amazon Linux 2023
Java
- Eclipse Temurin JDK 17, 21, and 25
- Red Hat OpenJDK 17/21/25
- Oracle JDK 21
- Bouncy Castle Java FIPS 1.0.2.x
Application server
- Apache Tomcat 10.1 and later
Databases
- MySQL 8.x, 9.x
- PostgreSQL 17.x, 18.x
- AWS Aurora/MySQL 8.0.x and AWS Aurora/PostgreSQL 16.8, 17.7
DevOps
- Docker and Kubernetes deployment support
- Red Hat UBI9 base image (custom OS images supported)
Mobile & app SDK platforms
- Android 7.0+, Wear OS 2.0+
- iOS 14+, watchOS 4.2+
- JavaScript with WebAuthn API
- Objective-C, C++, Swift, Cordova, Java, ReactJS
App types
- Web Apps, Progressive Web Apps (PWA), Mobile Apps, Hybrid Apps using WebView or mobile browser via App Links/ Universal Links
Widgets
- Sign-in, Transactions, Sign-up, Credentials (customizable UI)
Secure hardware
- Secure Elements, Trusted Execution Environments (TEE), Secure Enclave
- Platform and roaming authenticators (security keys, passkeys, biometrics, PINs, NFC FIDO2 cards)