YubiEnroll
Easily enroll YubiKeys on behalf of end users and make going passwordless quick and simple at scale.
Social engineering scams targets users and IT helpdesks
As the cyber threat landscape evolves, increasingly malicious actors have devised ways to target the user and the IT help desk and circumvent existing user verification processes. They can leverage stolen personally identifiable information of employees, and then easily answer security questions posed by the IT helpdesk after which point they can take over a user’s entire digital presence.
Enrolling YubiKeys on behalf of users drives
greater security
and efficiency
With sophisticated cyber threats on the rise, smart organizations are choosing YubiKeys, modern hardware security keys proven to stop phishing scams and account takeovers in their tracks, to raise the bar for security. Making it a simple and easy onboarding experience for users enhances adoption rates, leading to a truly phishing-resistant enterprise.
With the Yubico Enrollment Suite, organizations can select their path to stronger security, choosing either YubiEnroll or Yubico FIDO Pre-reg, to easily enroll YubiKeys on behalf of users, opting for convenience, a fast and easy onboarding experience and a clean audit trail.
YubiEnroll
With YubiEnroll organizations of all sizes can easily enroll YubiKeys on behalf of end users, or do so through partners, making going passwordless a snap.
Organizations can empower their IT team to leverage existing processes, such as high assurance in person identity proofing, and enroll YubiKeys on short notice using a client application in their premises and deliver them directly to the end user, as well as do so in certain geographies that cannot easily accommodate turnkey delivery services.
YubiEnroll capabilities that drive security and efficiency
Managing FIDO credential enrollment for users just got easier with YubiEnroll. Designed specifically for IT staff and administrators, this tool simplifies the process of preparing, creating, and registering FIDO credentials. Whether you’re setting up a new employee, replacing a lost or stolen YubiKey, or quickly creating a new key on the spot, YubiEnroll has you covered!
Support for key platforms
YubiEnroll will support both Microsoft Entra ID and Okta environments and ships as a command line tool (CLI) for Windows, enabling enrollment of a FIDO credential on behalf of a user, as well as configuring the YubiKey for use. Over time we plan for an expansion of this toolset and expect additional IdPs to be supported by YubiEnroll.
IT staff with sufficient access to manage other accounts via the Identity Provider’s API are able to enroll FIDO credentials for users with YubiKeys and Security Keys.
Support for a range of YubiKeys
YubiEnroll supports all YubiKey and Security Key form factors, whether you’re connecting via NFC or USB. Simply plug in or tap and let YubiEnroll guide you through enrollment.
Support for a range of YubiKey configurations
YubiEnroll offers a range of powerful features, including factory resetting YubiKeys and Security Keys, setting and managing PINs (with options for forced PIN changes and minimum PIN length), as well as configuring the user verification. It supports Enrollment on Behalf of (EOBO) for both Microsoft Entra ID and Okta.
Get started
Ready for YubiEnterprise services?
If you’re looking for an easy, flexible solution to improve your organization’s security landscape, let YubiEnterprise Services own the logistical difficulties. Our team is here to find the right solution for you.
Looking for technical assistance?
Need help with technical integration services, deployment planning, YubiKey management, user training, or anything else? Yubico Professional Services offer best-in-class assistance.