Based on the next-generation authentication standard “FIDO2”'s specification, it realizes collaboration with biometric authentication of major devices.
It enhances authentication of web applications including SaaS without reworking.
It reduces the risk of impersonation associated with rapid changes in the working environment without sacrificing the convenience, and contributes to the promotion of an IT system accessible from anywhere.

 

IceWall MFA Passwordless authentication (IceWall Hello solution)

Solution to enable passwordless authentication by combining standard device biometrics authentication and multi factor authentication with other methods.
IceWall Hello is offered as one of the functions of IceWall MFA, and adopts specifications of the latest version of next generation authentication "FIDO2" standard* and "W3C Web Authentication specification (WebAuthn)".

Strengthens authentication for various web application including SaaS by authenticating with device specifically having pre-installed encryption key.

*FIDO - Fast IDentity Online


Advantage

  • Passwordless authentication
    Enables passwordless authentication by leveraging biometrics authentication and relieves users from password management.
  • Diverse multi factor authentication
    Meets system requirement by implementing authentication by combining various authentication methods including traditional password.
  • Supports various Web application including SaaS
    Support for various device based biometrics authentication use cases. Easy implementation of biometrics authentication for web application. No application side modification makes easy integration with SaaS.
  • Multi Device support
    Supported for Windows 10, iOS, and Android.
  • No additional authentication devices / cost
    Leverages device standard biometrics authentication for web application authentication. Windows Hello, Apple Touch ID, Apple Face ID, and biometrics authentication on Android.
  • Prevents unauthorized use by restricting only to device with initial registration.
    Prevents initial registration spoofing using mail-based one-time password.
  • Unnecessary for collecting user biometric data
    FIDO2 specification enables authentication with registered device in isolated environment without transferring the biometrics data on network.
    The server authenticates with user validation information sent from user device.

Supported browsers

  • Windows
    Edge
  • iOS
    Mobile Safari (works with iOS IceWall Hello app)
  • Android
    Chrome (works with Android IceWall Hello app)
 

IceWall Hello Use case

e.g. Face ID



Authentication with device specifically having pre-installed encryption key.

Initial registration and authentication flow