Not only is it a challenge for users to remember complex passwords, but organizations face the ongoing threat of phishing attacks. FIDO (Fast Identity Online) authentication offers a modern, secure, and user-friendly alternative. By leveraging device-based credentials, FIDO eliminates the need for traditional passwords, enhancing both security and user experience.
FIDO (Fast Identity Online) is a security standard designed to provide passwordless and phishing-resistant authentication. FIDO support in SAP Customer Data Cloud allows you to integrate it into your user registration and login flows.
FIDO introduces multi-device credentials, also known as passkeys, in addition to single-device credentials. Passkeys offer several advantages:
- Convenience – Users can authenticate across various devices, platforms, and operating systems.
- Security – Passkeys are resistant to phishing attacks, as they are tied to the specific device and domain.
- Accessibility – Passkeys can be recovered if a device is lost, ensuring users always have access to their accounts.
For more information refer to the FIDO Authentication documentation in the SAP Help Portal.
Setting Up FIDO in SAP Customer Data Cloud
To enable FIDO, follow these steps:
- Access the authentication settings by navigating to the SAP Customer Data Cloud console at http://console.gigya.com and go to Identity>Security>Authentication.
- Enable FIDO by selecting the FIDO Configuration checkbox and configure the contained fields.
Please refer to the FIDO Authentication documentation in the SAP Help Portal for detailed explanations of each field.
Integrating FIDO Into Login and Registration Flows
SAP Customer Data Cloud uses the UI Builder and Screen-Sets to configure login and registration flows. Several widgets and screens are available to facilitate FIDO integration:
Passkey Widgets:
- Register using Passkey – Initiates the registration flow, including from within a login flow.
- Login Passkey – Initiates the login flow using a passkey.
- Add Passkey – Initiates the process of adding a passkey during user registration.
- Passkeys Manager – Lists and manages all devices registered by a user.
Passkey Screens:
- Passwordless Registration – Available in the Passwordless Login screen-set.
- Passwordless Login – Available in the Passwordless Login screen-set.
- Passkeys Manager – Available in the Profile Update screen-set.
- Passkey Register– Encourages users to adopt passkeys during registration and is available in the RegistrationLogin screen-set.