Yubico and Okta deliver scalable, user-friendly, high-assurance phishing-resistant authentication solutions
Identity is a fundamental building block of a Zero Trust strategy. The YubiKey makes it possible to adopt strong phishing-resistant multi-factor and passwordless authentication and a smooth user experience when accessing apps and services. Enterprises, government agencies, and consumers can prevent account takeovers and go passwordless with Okta Adaptive MFA and the YubiKey. No matter the device, user, or login context, Okta Adaptive MFA and YubiKey together deliver a more reliable, compatible, and modern approach to phishing-resistant authentication.
Enterprise solutions
YubiKeys provide a bridge from legacy to modern authentication options.
Compliance & privileged users
YubiKeys address
strong authentication and compliance requirements.
Consumer solutions
Okta users strengthen authentication with YubiKeys—from simple to complex scenarios.
Executive Order compliance
Government agencies can deploy federally validated, hardware-backed MFA across multiple applications and operating systems.
“At Okta, we’re on a mission to ditch the password. As you’d expect, we use Okta FastPass for passwordless authentication for our global workforce. With Yubico, we saw an opportunity to leap the final hurdle to deliver an end-to-end passwordless experience.”
ON-DEMAND WEBINAR WITH OKTA
Beyond passwords: How Okta secured their global workforce with Yubico
Learn first-hand about some of the challenges that Okta faced and why they chose Yubico as their partner to deliver a large-scale, global, solution with the highest level of phishing-resistant assurance.
Yubico and Okta: Securing global enterprises together
Usernames and passwords alone won’t keep your business up and running in the event of a cyber attack, as these are easily hacked. And not all multi-factor authentication (MFA) is created equal. Based on NIST guidelines, currently only MFA that is based on Smart Card (PIV) or FIDO (passkey) standards are considered phishing-resistant. And if you are going the FIDO route, depending on the FIDO authenticator you choose, it can also help you maintain business continuity in a variety of scenarios.
Simplify adoption of passwordless, phishing-resistant authentication with Yubikey as a Service—turnkey enrollment and delivery for global deployments
Combining the might of Okta’s Adaptive MFA with Yubico’s range of YubiKeys and services, provides a strength-in-depth approach to authentication that enterprises can count on. With security only being as strong as its weakest link, even the most stringent security measures would not be effective if users refuse to adopt it.
Yubico offers YubiKey as a Service, a flexible and cost effective way for smart enterprises and governments to adopt modern cybersecurity at scale and protect their entire ecosystem including the workforce, supply chain and end customers. YubiKey as a Service customers exclusively can benefit from Enrollment and Delivery services expediting their time to value for phishing-resistant authentication.
Through Enrollment services, enroll YubiKeys on behalf of users for fast user onboarding and adoption leveraging either FIDO Pre-reg or YubiEnroll.
FIDO Pre-reg
FIDO Pre-reg offers secure, passwordless MFA from day one, streamlining deployment by eliminating user registration. This turnkey solution reduces admin costs, accelerates adoption, and enhances productivity with phishing-resistant passkey authentication in just two easy steps. Available exclusively through YubiKey as a Service, FIDO Pre-reg handles all of the key delivery logistics door-to-door, and frees up both IT staff and end users.
YubiEnroll
YubiEnroll simplifies YubiKey enrollment for IT teams, enabling quick setup of FIDO credentials for new users, replacements, or on-the-spot creation. It streamlines the passwordless process for organizations of any size, ensuring easy management and enhanced efficiency.
SOLUTION BRIEF
Yubico and Okta accelerate phishing-resistant MFA and passwordless for the enterprise with fast, out-of-the-box FIDO activation
Contact us!
Reduce IT burden
IT departments no longer need to register YubiKeys on behalf of their users or require users to self-enroll. Save on time and costs by eliminating the need to manually register security keys for each employee, one by one.
Simple and fast for users
Users can receive YubiKeys that are pre-registered with the organization’s Identity Provider (IdP). No longer a need to self-enroll, leaving users free to enjoy secure, passwordless access to their online accounts in minutes.
Accelerate business securely
FIDO Pre-reg is available through the YubiKey as a Service program which delivers greater business flexibility and agility while lowering the cost to entry, and dramatically raising the security bar.
Strong phishing-resistant MFA
Okta Adaptive MFA customers can leverage multiple authentication protocols available on the YubiKey to address varying use cases, protecting all users, from entry-level to executive, with robust and reliable authentication they can trust.
Compatible
Okta Adaptive MFA and the YubiKey are supported by a wide range of integrations across leading vendors in infrastructure and security, enabling the joint solution to work across devices and platforms.
Always On
Okta’s Adaptive MFA adapts to specific risk levels of each authentication attempt; giving an organization continuous protection. Combined with YubiKeys, which provide reliable hardware-backed security that is battery free and always on and accessible, organizations can rest assured that they have strong phishing-resistant requirements in place.
“This is awesome! Yubico not only listened but delivered a solution that helps solve our user adoption challenges and reduce cost and overhead at the same time.“
Protect your workforce like Okta did with Yubico!
Okta, an industry leader in identity and access management, adopted FIDO Pre-reg in 2024, deploying YubiKeys to its global workforce to ensure phishing-resistant authentication. The main reasons for Okta choosing Yubico are because of Yubico’s reputation as a leading hardware security key manufacturer and their need for a large-scale, global, solution that had the highest level of phishing-resistant assurance. The goals for their deployment hinged on providing phishing-resistant onboarding, consistent recovery processes, and efficient security without increasing admin overhead. Their key challenges included manual onboarding of recovery factors, logistical challenges with a global workforce, lack of policy mandates and no roaming authenticator.
6,000+
YubiKeys delivered in 4 months
100%
coverage for new and existing employees
42
countries served
Zero
admin overhead for recovery
Raise the bar for security with FIDO Pre-reg and Okta Adaptive MFA
Phishing remains a leading cause of cyber breaches, with 68% of attacks involving stolen credentials, as highlighted in the Verizon DBIR report. To combat this, Yubico and Okta have partnered to deliver innovative, phishing-resistant MFA solutions that secure organizations against evolving threats. This eBook explains the essentials of phishing-resistant MFA, its benefits, and how it helps create resilient, secure users and enterprises. With tools like YubiKey as a Service and Yubico FIDO Pre-reg, organizations can future-proof their authentication strategies, adapt to regulatory demands, and stay ahead of modern cyber threats.
“Phishing-resistant authentication has to be secure. But it also needs to be IT and user-friendly. Okta and Yubico give customers the security and flexibility needed to protect their enterprise resources.”
Learn more about Yubico and Okta
Explore our library of solution briefs, videos and more
