Seamlessly Integrate MagicEndpoint with
Unmatched Okta authentication standards
With remote work, cloud applications, and growing threats, organizations are rethinking IT security as traditional perimeter models lose effectiveness. Many, including the US government, are adopting a zero-trust approach, where no actor, system, or network is trusted without verification.
This zero-trust, always-verify strategy demands advanced multi-factor authentication
“Agencies must require their users to use a phishing-resistant method to access agency-hosted accounts. For routine self-service access by agency staff, contractors, and partners, agency systems must discontinue support for authentication methods that fail to resist phishing, including protocols that register phone numbers for SMS or voice calls, supply one-time codes, or receive push notifications.”
— U.S Government, Whitehouse (https://zerotrust.cyber.gov/federal-zero-trust-strategy/)
Next-generation passwordless authentication
Many organizations use phone-based MFA methods like SMS, OTP, and Push Notifications, but these are vulnerable to phishing. As security standards rise, current phone-based passwordless authenticator apps using OTP or Push are no longer sufficient. Apps like Microsoft Authenticator, with simple “Approve” or “Deny” buttons, are inadequate. Additionally, even some phishing-resistant methods today can burden users due to the need for continual verification.
MagicEndpoint & Okta Authentication
WinMagic’s MagicEndpoint redefines endpoint authentication by making the device itself the authenticator. Using public key cryptography and the trusted platform module (TPM) in business-class machines, MagicEndpoint handles remote authentications while supporting local PIN, biometrics, external tokens, and mobile phones. This approach separates remote access from endpoint access, implementing MFA for endpoint access and continuous verification of the user, aligning with the zero trust “always verify” principle.
MagicEndpoint offers phishing-resistant authentication, surpassing popular out-of-band solutions, and delivers a seamless user experience with no user action required. This innovation supports the zero-trust principle of continual verification without burdening users, embodying our new way of thinking.
Passwordless Authentication Integration
When users request access to their applications, the application delegates to Okta and Okta subsequently delegates authentication responsibilities to MagicEndpoint.
The user only needs to authenticate to their device perhaps with a local gesture or biometrics. Once authenticated successfully, the user is no longer needed to perform any remote authentication to access their applications.
The user is logged into the system and has access to all remote authentications. With no additional burden on the user.
That’s all — it’s secure and simplified, all at once.
Implement secure device trust strategies
WinMagic’s 20-plus years of experience on the endpoint with authentication and encryption provides a new security posture for your organization by supporting data signals to your IAM conditional access. Whether your user devices have been put into a compromising state, e.g. Secure Boot disabled, or encryption has been removed from files, MagicEndpoint and Okta can ensure the right measures are put into place to protect your users and organization from attacks.
