The integration enables employees to use their existing physical access cards as a multi-factor authentication (MFA) method to access resources such as Entra ID and Microsoft 365.
HID has announced a new integration with Microsoft Entra ID to enable employees to use their existing physical access cards as a multifactor authentication (MFA) method to access resources such as Entra ID and Microsoft 365. This enables organizations to take the next step on their journey to
passwordless by simplifying MFA deployment and enabling faster adoption for Entra ID users.
The integration significantly expands options for organizations to tailor their MFA journey while meeting Microsoft’s mandatory MFA requirements and accelerating the path to phishing-resistant passwordless authentication.
Entra ID is Microsoft’s cloud-based identity and access management service that employees can use to access various resources, including Microsoft 365, the Azure portal, and thousands of other SaaS applications. Entra ID also helps users access internal resources like apps on the corporate intranet and any cloud apps developed for the end user organization.
The new integration well suits the trends of physical-logical access integration and
multifactor authentication, two major topics in
identity management right now. Physical-logical integration allows users to use the same authenticator – be it a keyfob or access card – to access both the door and IT resources. MFA refers to authentication by way of combining multiple authentication factors, such as key cards, password and biometrics, and adds an extra layer of security in both physical and logical access control. MFA is so effective that Microsoft is already enforcing mandatory MFA for many of its applications and services, and this is where the integration with HID comes in, making MFA deployment faster and more efficient.
“Deploying MFA is one of the most important steps to securing user identities, and the purpose of Microsoft Entra ID External Authentication Method (EAM) is to extend the purpose of Entra ID’s functionality by enabling organizations to use the third-party MFA solution of their choosing to establish quick, simple, and secure MFA,” said Eleanor Falla, Senior Product Manager for Microsoft Security. “HID’s integration offers flexibility through its many authenticator choices and offers the convenience of choosing from existing physical cards to access both facilities and digital resources as an MFA factor.”
The integration is partially made possible by the HID Authentication Service powered by the HID Authentication Platform. The secure cloud platform enables organizations to meet Microsoft’s mandatory MFA requirements, whether they are in the early phase of their passwordless journey or they are ready to make the shift to a completely phishing-resistant, passwordless authentication path.
Passwordless refers to authentication without the use of passwords so that, for example, the user can log into IT resources with a passcode sent to their device or with the biometric features on their device (Face ID, for example). Passwordless is deemed more secure than passwords. In particular, passwordless is “phishing-resistant” because, with no passwords to steal, attackers can't use phishing techniques to capture login info. Further, passwords have become increasingly complex and can be forgotten easily. When this happens, the user may have to constantly reset passwords, which is not conducive to work efficiency and productivity. Passwordless, on the other hand, solves this problem.
"HID’s longstanding partnership with Microsoft has delivered increasingly valuable MFA innovations as we collaborate on driving a passwordless future,” said HID's Sean Dyon, Director of Strategic Alliances at HID. “Our solutions meet enterprises wherever they are on what I call the ‘crawl, walk, run’ path to completely phishing-resistant passwordless authentication. We recognize the vital importance of effective change management and optimizing the user experience at every point in this journey through extensive MFA options that fit a broad range of organizational needs.”
Key benefits
The key benefits delivered by the integration are flexibility, convenience and security. Below we take a look at what each benefit entails:
Flexibility to tailor the MFA journey
HID offers the industry's broadest range of authentication methods and physical authenticators including hardware OTP tokens, security keys and smart cards equipped with FIDO technology (device-bound passkeys) as well as PKI/CBA, and physical access cards.
Convenience for users and administrators alike
HID is the first vendor to offer the option of using physical access cards to access Microsoft Entra ID, unifying physical and digital access from doorways to desktops and cloud applications. This means organizations don’t have to require users to have a company phone or to install anything on their personal phone.
Enhanced security from a trusted leader
With HID, organizations can leverage over 20 years expertise in smart cards, digital certificates and lifecycle management to quickly deploy MFA per Microsoft requirements without compromising productivity.