YubiKey as a Service – Enrollment
Delivering organizations choice in creating phishing-resistant users and going passwordless. YubiKeys ready to activate like a credit card.
Pre-enroll YubiKeys for your employees
Go beyond phishing-resistant MFA and accelerate the creation of phishing-resistant users. With Enrollment, YubiKeys arrive pre-enrolled and ready to activate, reducing setup friction and enabling secure onboarding from the start. Organizations can choose from two enrollment options based on their deployment needs:
FIDO Pre-Reg: A turnkey, fully managed service that delivers pre-enrolled YubiKeys directly to users, available exclusively through YubiKey as a Service.
YubiEnroll: A free enrollment option that allows IT teams or partners to enroll YubiKeys on behalf of users and distribute them directly.
FIDO Pre-reg
Ideal for organizations with 500+ users
FIDO Pre-Reg is a turnkey service that delivers pre-enrolled YubiKeys directly to your users, whether they work in corporate offices or remotely. Users can go passwordless from day one without manual setup or enrollment steps.
Available exclusively through YubiKey as a Service, FIDO Pre-Reg offloads delivery logistics end to end, reducing operational burden for both IT teams and users. The service currently supports Microsoft and Okta, with additional Identity Providers planned.
YubiEnroll
Ideal for organizations of all sizes
YubiEnroll provides a flexible way for IT teams or partners to enroll YubiKeys on behalf of users, making passwordless adoption fast and accessible.
This free service allows organizations to enroll YubiKeys on short notice or in regions where turnkey delivery services may not be available. IT teams use a client application to enroll YubiKeys for users and deliver them directly, maintaining control while reducing setup friction.
Learn how Okta protected their global workforce with Enrollment
In 2024, Okta implemented FIDO Pre-Reg to deploy YubiKeys across its global workforce, strengthening phishing-resistant authentication at scale. Okta selected Yubico for its leadership in hardware security keys and its ability to support a global deployment with the highest assurance levels.
Deployment goals focused on phishing-resistant onboarding, consistent recovery processes, and strong security with minimal administrative overhead. Challenges included global logistics, manual recovery onboarding, limited policy enforcement, and the lack of roaming authenticators.
“At Okta, we’re on a mission to ditch the password. As you’d expect, we use Okta FastPass for passwordless authentication for our global workforce. With Yubico, we saw an opportunity to leap the final hurdle to deliver an end-to-end passwordless experience.”
Download this free infographic to learn more about how Okta became an early adopter of FIDO Pre-reg, deploying YubiKeys to its entire global workforce to establish an end-to-end phishing-resistant authentication experience.
Let us know if you are interested
Enrollment services, available exclusively through YubiKey as a Service, deliver a complete registration experience designed for enterprise needs. Accelerate your journey toward phishing-resistant users and eliminate passwords with a scalable enrollment approach.
If you’re an Okta customer, Contact Us. For other environments, please fill out the form.
