Phishing-Resistant Authentication: No Directory Service


For smaller organizations centralized user directories may not be manageable due to staffing, budgetary restrictions, or simply age. However this does not preclude the ability of this architecture from leveraging strong phishing resistant MFA. WebAuthn (FIDO2) offers flexible, easy to deploy, phishing resistant passwordless or multifactor authentication for many different platforms. Individual accounts, like Google, Apple, or Microsoft accounts can all be secured with FIDO2 Tokens. WebAuthn also has the advantage of allowing for future growth, while supporting a best in class security posture.