As cyber attacks accelerate in the age of AI, organizations face a growing challenge: protecting every user across an increasingly complex digital environment. AI-powered phishing campaigns, credential theft, and automated social engineering attacks are making traditional authentication methods easier to bypass than ever before. In response, many organizations are moving toward phishing-resistant authentication and passwordless access – but security is only as strong as its adoption.
If deploying stronger authentication is too complex, manual, or time-consuming, organizations struggle to scale protection across their entire workforce. This is why we introduced Enrollment Services — available exclusively through YubiKey as a Service: to simplify and accelerate the deployment of phishing-resistant authentication. One of the core capabilities within these Enrollment Services is FIDO Pre-reg, a first-of-its-kind solution that removes the complexity of enrolling users into passwordless authentication.
Today, we’re excited to expand that vision even further by extending FIDO Pre-reg General Availability to Ping Identity – enabling organizations using Ping Identity to accelerate passwordless adoption across their workforce. This news follows the successful launches of General Availability with Okta and Versasec, and Early Access with Microsoft.
“Partnering with Yubico to integrate FIDO Pre-reg with Ping Identity is a major step forward for our customers,” said Loren Russon, VP of product and technology. “This joint solution strengthens security at critical points in the user lifecycle, from onboarding to account recovery, by accelerating the adoption of phishing-resistant authentication. It ensures our joint customers can achieve robust security without sacrificing a simple, seamless login experience for their entire workforce.”
Simplifying the path to phishing-resistant authentication
FIDO Pre-reg, part of Yubico’s Enrollment Services options within YubiKey as a Service, delivers a turnkey passwordless onboarding experience that eliminates many of the operational barriers organizations face when deploying security keys.
Instead of requiring users to manually register authentication devices, organizations can deliver pre-registered YubiKeys that are ready to activate immediately. Yubico securely enrolls the keys with the organization’s choice of identity provider during production and ships them directly to employees anywhere in the world.
This approach significantly simplifies deployment while ensuring users begin with the strongest form of device-bound passkey authentication from day one. With FIDO Pre-reg, employees can securely access their accounts in minutes – without manual registration – while IT teams reduce operational overhead and eliminate common security gaps during onboarding and account recovery.
Traditional authentication systems often rely on users or helpdesks to perform manual registration steps – creating opportunities for attackers to exploit the process. FIDO Pre-reg removes these vulnerabilities by securely enrolling users directly into the authentication platform before the key even reaches them. This approach helps organizations:
- Reduce helpdesk dependency
- Prevent phishing-based credential compromise
- Strengthen security during onboarding and account recovery
- Accelerate adoption of phishing-resistant authentication
By simplifying deployment, organizations can focus on what matters most: protecting every user and every login.
Strengthening identity security with Ping Identity
With the addition of Ping Identity, organizations using PingOne Advanced Identity Cloud PingID, or PingOne MFA can now bring phishing-resistant authentication to their environments faster and more seamlessly for either workforce or consumer identities.
By integrating Yubico’s hardware-backed authentication with the Ping Identity Platform, organizations can strengthen security at some of the most vulnerable moments in the employee lifecycle – from onboarding and authentication to account recovery.
This helps eliminate common attack paths, including helpdesk social engineering and credential phishing, while providing users with a simple and secure login experience. It also enables organizations to scale phishing-resistant authentication across the enterprise, including key benefits:
- Support for new hires and existing employees
The program covers the full workforce, across new hires and existing employees. Administrators can automate large-scale deployments, enabling organizations to build wall-to-wall phishing resistance across their workforce. - Wide choice of YubiKey form factors
Organizations can quickly and seamlessly onboard users across the full set of YubiKeys including the YubiKey 5 Series, YubiKey 5 FIPS Series, and Security Key Series. - Global coverage to over 90% of countries worldwide
The program also supports organizations with employees across 199 global locations, covering over 90% of countries worldwide, enabling secure onboarding for distributed workforces.
Ask us about FIDO Pre-reg with Ping Identity
FIDO Pre-reg is part of Yubico’s Enrollment Services, available exclusively through YubiKey as a Service, which provides a flexible subscription model that lowers the barrier to deploying phishing-resistant authentication at scale. Organizations can learn more and submit interest through the FIDO Pre-reg interest form.
As organizations defend against increasingly sophisticated cyber threats – including those powered by AI – Yubico continues to focus on delivering solutions that make strong security easy to deploy, easy to scale, and easy for users to adopt. Because building a phishing-resistant enterprise starts with creating phishing-resistant users.For more information on FIDO Pre-reg, please visit here.
