Integration of FIDO and Mobile Connect to deliver authentication globally worldwide at scale
Download as PPTX, PDF0 likes64 views
The document outlines the integration of FIDO and Mobile Connect for global authentication, established through a partnership between the FIDO Alliance and GSMA in 2017. It highlights the complementary nature of both technologies in providing secure, two-factor online authentication and outlines the framework for their federation. Key details include the use of OpenID Connect for federation, support for multiple authentication methods, and resources for further information.
Integration of FIDO and Mobile Connect to deliver authentication globally worldwide at scale
- 1. FIDO AND MOBILE CONNECT INTEGRATION OF FIDO AND MOBILE CONNECT TO DELIVER AUTHENTICATION GLOBALLY
- 2. Why, What, and How
- 3. Why • Liaison relationship between FIDO Alliance and GSMA to explore how FIDO authentication fits with Mobile Connect established in May 2017. • FIDO objectives align with Mobile Connect • Addressing the same problem: easier, safer online authentication. • Leverage the mobile phone to provide easy secure two-factor authentication. • Create a pluggable framework that can support a variety of security levels as well as supporting new authentication methods as they arise. • Promote the adoption of FIDO Authentication with Mobile Connect.
- 5. What • Highlight the synergies between Mobile Connect and FIDO along with how both technologies are complimentary to one another. • Mobile Connect modular design support a range of authentication methods. • Leverage Mobile Connect as a global federated authentication service with FIDO as the preferred authenticator. • Demonstrate how FIDO can be integrated into Mobile Connect • Focus initially on the use of UAF and then move on to consider U2F and FIDO2 (W3C Web Authentication / FIDO Client-to- Authenticator Protocol).
- 6. Basic Architecture and Flow
- 7. • Federation based on OpenID Connect Profile. • Supported by development in OpenID Foundation MODRNA working group. How Mobile Connect Framework for Federation • Minimum profiles for FIDO Authenticator to meet particular assurance levels. • Discovery process to identify available device authenticators. FIDO Authenticator Policy • Assurance level mapped to appropriate FIDO Authenticator policy. • Authentication Context Reference used during authentication process. Authentication Context
- 8. Resources • FIDO Alliance specifications: https://fidoalliance.org/download/ • FIDO Alliance White Papers: https://fidoalliance.org/white- papers/ • Mobile Connect: https://www.gsma.com/identity/mobile-connect • OpenID Foundation working groups: http://openid.net/wg/