Justin Soong

Articles by

Justin Soong

Understanding Relying Parties for Passkeys: A Guide on what, why, and how to use them.

Relying parties (RPs) are crucial to ensuring passkeys are phishing-resistant. In more detail, we explain what relying parties are and how to configure them.

Passkeys

WebAuthn

Phishing resistant

FIDO2

NIST Passkeys Supplementary Guidelines: April 2024 Part 2 Implementation

Our initial analysis addressed the new NIST supplement for passkeys, breaking down the changes and clarifying positions regarding synced/syncable passkeys. In part 2, we focus on implementation considerations.

NIST Passkeys Supplementary Guidelines: April 2024 Part 1

NIST's supplement offers clarity on FIDO2 Passkeys, especially syncable ones, aiding adherence to NIST AAL standards.

Rapid Response Playbook: Account Takeovers & Credential Stuffing

A rapid-response playbook tailored specifically for the aftermath of Account Takeovers (ATOs) and Credential Stuffing incidents.

Credential-stuffing

Account takeover

Flexible multi-factor authentication

Fraud prevention

How to enable MFA for Auth0 using Authsignal

Supercharge your Auth0 instance with Authsignal and deploy Passkeys and Risk based MFA.

FIDO2

Flexible multi-factor authentication

No-code rules engine

Multi-factor authentication

Protecting Loyalty Programs with Multi-factor Authentication

Loyalty programs drive relations and growth, but cyber threats surge with the value of accounts. Multi-factor authentication is now essential for security.

Loyalty programs

Customer journey

Fraud prevention

Multi-factor authentication

Navigating Passkeys within SCA PSD2

PSD2 SCA reinforces financial security through its Strong Customer Authentication mandate. Authsignal's platform streamlines compliance by integrating Passkeys.

Top 3 Account Take Over (ATO) attack vectors to watch in 2024

We explore some of the vectors that will become more prolific in 2024 and some mitigating controls.

Account takeover

FIDO2

Flutter Passkeys SDK

Adding Passkeys support to your Flutter mobile app is now made extremely easy using Authsignal's latest Flutter Passkeys SDK release.

Passkeys

SDKs

APIs

Java Passkeys back-end SDK

‍Authsignal's Java SDK allows engineers to implement passkeys server side calls in Java/JVM server environments.

Passkeys

SDKs

Passwordless authentication

Implementation

Essential Eight Updates: The rise of phishing-resistant MFA

Authsignal breaks down the critical aspects of The Essential Eight Maturity Model specifically related to multi-factor authentication.

Multi-factor authentication

Passkeys

The Essential Eight

Passwordless authentication

Meeting Compliance: Multi-factor Authentication (MFA) Control Requirements

MFA is a critical control in today's compliance. Authsignal maps out the relevant requirements in ISO 27001, PCI DSS Level 1, and SOC 2.

Multi-factor authentication

Flexible multi-factor authentication

Compliance

Passkeys APIs and SDKs: Simplifying Secure Implementation

Passkeys APIs and SDKs - A guide to easily implement Passkeys. Educating customers on the benefits of passkeys is crucial in building adoption.

Passkeys

Passwordless authentication

APIs

SDKs

Zero trust in consumer/B2C authentication

Zero trust is a security model that assumes that no user or device can be trusted, even if they are inside the network perimeter.

Passwordless authentication

Multi-factor authentication

Fraud prevention

Zero trust

Passkeys Support for AWS Cognito & Amplify

Learn how to enable Passkeys support for AWS Cognito and Amplify in your native iOS and Android applications with React Native using our implementation guide.

Passkeys

Passwordless authentication

AWS

Passkeys Mobile Native SDKs

Authsignal is proud to release our latest feature: Mobile Native SDKs for Passkeys. This includes platform support for iOS, Android and cross-platform support..

Passkeys

Passwordless authentication

SDKs

Risk based authentication

Passwordless and Adaptive MFA for Microsoft Azure AD B2C

Authsignal integrates with Microsoft Azure AD B2C, enabling tenants to quickly set up complex MFA and passwordless user journeys in hours using Open ID Connect.

Passwordless authentication

Push authentication

Flexible multi-factor authentication

Azure AD B2C

Authsignal Launches Passwordless Authentication & Fraud Rules in Europe and Australia

Auththsignal's Passwordless Authentication and Fraud Rules engine is live in Europe and Australian regions.

Passwordless authentication

What is a no-code fraud rules engine?

At Authsignal, we created a no-code fraud rules engine to enable FraudOps teams to design their own rules, deploy and...

No-code rules engine

Multi-factor authentication

Sim Swap Fraud is our generation's Y2K moment

Scammers deceive your carrier to activate their SIM, seizing control of your number.

Fraud awareness

Optimize Your Customer Journey: Key Places for Passwordless Authentication

Adaptable Multifactor Authentication Made Easy. Here's 4 places you should secure with MFA today.

Passwordless authentication

Customer journey