Yubico | Okta
Create phishing-resistant users and fast-track enterprises to passwordless with Okta Adaptive MFA and YubiKey
Yubico and Okta deliver scalable, user-friendly, high-assurance phishing-resistant authentication solutions
Identity is a fundamental building block of a Zero Trust strategy. The YubiKey makes it possible to adopt strong phishing-resistant multi-factor passwordless authentication and a smooth user experience when accessing apps and services. Enterprises, government agencies, and consumers can prevent account takeovers and go passwordless with Okta Adaptive MFA and the YubiKey. No matter the device, user or login context, Okta Adaptive MFA and YubiKey together deliver a more reliable, compatible, and modern approach to strong authentication.
Enterprise solutions
YubiKeys provide a bridge from legacy to modern authentication options.
Compliance & privileged users
YubiKeys address
strong authentication and compliance requirements.
Consumer solutions
Okta users strengthen authentication with YubiKeys—from simple to complex scenarios.
Executive Order compliance
Government agencies can deploy federally validated, hardware-backed MFA across multiple applications and operating systems.
“At Okta, we’re on a mission to ditch the password. As you’d expect, we use Okta FastPass for passwordless authentication for our global workforce. With Yubico, we saw an opportunity to leap the final hurdle to deliver an end-to-end passwordless experience.”
ON-DEMAND WEBINAR WITH OKTA
Beyond passwords: How Okta secured their global workforce with Yubico
Learn first-hand about some of the challenges that Okta faced and why they chose Yubico as their partner to deliver a large-scale, global, solution with the highest level of phishing-resistant assurance.
Yubico and Okta: Securing global enterprises together
Usernames and passwords alone won’t keep your business up and running in the event of a cyber attack, as these are easily hacked. And not all multi-factor authentication (MFA) is created equal. Based on NIST guidelines, currently only MFA that is based on Smart Card (PIV) or FIDO (passkey) standards are considered phishing-resistant. And if you are going the FIDO route, depending on the FIDO authenticator you choose, it can also help you maintain business continuity in a variety of scenarios.
Passwordless phishing-resistant authentication with Yubico Enrollment Suite
Combining the might of Okta’s Adaptive MFA with Yubico’s range of YubiKeys provides a strength-in-depth approach to authentication that enterprises can count on. With security only being as strong as its weakest link, even the most stringent security measures would not be effective if users refuse to adopt it.
With the Yubico Enrollment Suite, organizations can select their path to stronger security, and easily enroll YubiKeys on behalf of users leveraging either Yubico FIDO Pre-reg or YubiEnroll.
Yubico FIDO Pre-reg
Yubico FIDO Pre-reg offers secure, passwordless MFA from day one, streamlining deployment by eliminating user registration. This turnkey solution reduces admin costs, accelerates adoption, and enhances productivity with phishing-resistant passkey authentication in just two easy steps.
YubiEnroll
YubiEnroll simplifies YubiKey enrollment for IT teams, enabling quick setup of FIDO credentials for new users, replacements, or on-the-spot creation. It streamlines the passwordless process for organizations of any size, ensuring easy management and enhanced efficiency.
SOLUTION BRIEF
Yubico and Okta accelerate phishing-resistant MFA and passwordless for the enterprise with fast, out-of-the-box FIDO activation
Reduce IT burden
IT departments no longer need to register YubiKeys on behalf of their users or require users to self-enroll. Save on time and costs by eliminating the need to manually register security keys for each employee, one by one.
Simple and fast for users
Users can receive YubiKeys that are pre-registered with the organization’s Identity Provider (IdP). No longer a need to self-enroll, leaving users free to enjoy secure, passwordless access to their online accounts in minutes.
Accelerate business securely
Yubico FIDO Pre-reg is available through the YubiKey as a Service program which delivers greater business flexibility and agility while lowering the cost to entry, and dramatically raising the security bar.
Strong phishing-resistant MFA
Okta Adaptive MFA customers can leverage multiple authentication protocols available on the YubiKey to address varying use cases, protecting all users, from entry-level to executive, with robust and reliable authentication they can trust.
Compatible
Okta Adaptive MFA and the YubiKey are supported by a wide range of integrations across leading vendors in infrastructure and security, enabling the joint solution to work across devices and platforms.
Always On
Okta’s Adaptive MFA adapts to specific risk levels of each authentication attempt; giving an organization continuous protection. Combined with YubiKeys, which provide reliable hardware-backed security that is battery free and always on and accessible, organizations can rest assured that they have strong phishing-resistant requirements in place.
“This is awesome! Yubico not only listened but delivered a solution that helps solve our user adoption challenges and reduce cost and overhead at the same time.“
Protect your workforce like Okta did with Yubico!
Okta, an industry leader in identity and access management, adopted Yubico FIDO Pre-reg in 2024, deploying YubiKeys to its global workforce to ensure phishing-resistant authentication. The main reasons for Okta choosing Yubico are because of Yubico’s reputation as a leading hardware security key manufacturer and their need for a large-scale, global, solution that had the highest level of phishing-resistant assurance. The goals for their deployment hinged on providing phishing-resistant onboarding, consistent recovery processes, and efficient security without increasing admin overhead. Their key challenges included manual onboarding of recovery factors, logistical challenges with a global workforce, lack of policy mandates and no roaming authenticator.
6,000+
YubiKeys delivered in 4 months
100%
coverage for new and existing employees
42
countries served
Zero
admin overhead for recovery
Raise the bar for security with Yubico FIDO Pre-reg and Okta Adaptive MFA
Phishing remains a leading cause of cyber breaches, with 68% of attacks involving stolen credentials, as highlighted in the Verizon DBIR report. To combat this, Yubico and Okta have partnered to deliver innovative, phishing-resistant MFA solutions that secure organizations against evolving threats. This eBook explains the essentials of phishing-resistant MFA, its benefits, and how it helps create resilient, secure users and enterprises. With tools like YubiKey as a Service and Yubico FIDO Pre-reg, organizations can future-proof their authentication strategies, adapt to regulatory demands, and stay ahead of modern cyber threats.
“Phishing-resistant authentication has to be secure. But it also needs to be IT and user-friendly. Okta and Yubico give customers the security and flexibility needed to protect their enterprise resources.”
Learn more about Yubico and Okta
Explore our library of solution briefs, videos and more
Ready to take the next step?
Find the right YubiKey
Contact our sales team for a personalized assessment of your organization’s needs.
Get protected today
Browse our online store today and buy the right YubiKey for you.