Intercede Launches FIDO Passkey Solution to Combat Phishing in Government and Enterprise Systems

Intercede, a digital identity specialist, has launched MyID Authenticate, a comprehensive FIDO passkey authentication solution designed to protect governments and enterprises from phishing attacks. The platform delivers phishing-resistant sign-in capabilities across Windows desktops, cloud services, and on-premise applications from a unified system. The solution makes its international debut at GovWare 2026 in Singapore, running from October 13-15, 2026.

Passwords and one-time codes remain highly vulnerable to phishing attacks, while FIDO passkeys offer phishing resistance through their fundamental design. Each passkey binds to the authentic site, its private key never leaves the user’s device, and no shared secret exists for attackers to steal or replay. Despite these advantages, many governments and enterprises struggle to extend passkey coverage beyond a limited number of web applications to Windows desktops, legacy systems, and virtual private networks.

“Everyone agrees passkeys are one of the strongest defences against phishing. The hard part has been getting them onto every desktop and into every modern application. That is exactly what MyID® Authenticate does,” said Dan McLoughlin, Chief Product Officer, Intercede.

Comprehensive FIDO Authentication Platform

MyID Authenticate functions as both a FIDO authentication server and a passkey issuer. The platform supports FIDO2 security keys along with device-bound and synced passkeys, featuring self-service enrollment capabilities. Passkey Windows Logon operates on Windows 10 and 11, including offline functionality, while SAML 2.0 and OpenID Connect extend the same passkey technology to cloud applications, on-premise systems, and VPNs. The solution includes federation capabilities with Microsoft Entra ID and Microsoft 365, and supports legacy applications through RADIUS alongside multiple strong and multi-factor authentication methods.

Enterprises can deploy MyID Authenticate according to their specific requirements, whether on-premise, in the cloud, or through hybrid configurations, while maintaining complete control over authentication data. The platform integrates with existing identity infrastructure, eliminating the need to remove and replace current systems. Its crypto-agile design supports post-quantum cryptography, enabling governments and enterprises to adapt as cryptographic standards and threat landscapes evolve.

Migration Tools and Integration Capabilities

For organizations currently using MyID MFA, the new MyID Authenticate Migration Tool provides a clear, supported pathway to the upgraded platform. The solution also integrates with MyID CMS for organizations requiring high-assurance credential issuance and management capabilities alongside authentication features. Intercede has already secured its first new client in Germany for the integrated MyID CMS and MyID Authenticate solution.

The platform addresses a critical gap in enterprise security infrastructure by extending passkey authentication beyond web browsers to the full spectrum of enterprise applications and systems. Traditional authentication methods, including passwords and one-time codes, continue to represent significant vulnerabilities in organizational security postures. Phishing attacks exploit these weaknesses by tricking users into revealing credentials or intercepting authentication codes during transmission.

Phishing-Resistant Architecture

FIDO passkeys eliminate these vulnerabilities through their architectural design, which prevents credential theft even when users interact with fraudulent sites or applications. The technology’s binding mechanism ensures that passkeys only function with their intended services, while the device-bound nature of private keys prevents their extraction or interception. Organizations implementing passkey authentication can significantly reduce their exposure to credential-based attacks, which remain among the most common and successful threat vectors targeting enterprises and government agencies.

The launch of MyID Authenticate at GovWare 2026 positions Intercede to address growing demand for phishing-resistant authentication in government and enterprise sectors. As cyber threats continue to evolve and increase in sophistication, organizations face mounting pressure to implement authentication technologies that provide robust protection against credential theft and account compromise. The platform’s support for post-quantum cryptography demonstrates forward-thinking security planning, preparing organizations for future cryptographic challenges.

Flexible Deployment Options

The solution’s flexible deployment model accommodates diverse organizational requirements and existing infrastructure investments. Organizations can implement the platform without disrupting current identity management systems, reducing implementation complexity and associated costs. The ability to deploy on-premise, in cloud environments, or through hybrid architectures provides organizations with deployment options aligned with their security policies, compliance requirements, and operational preferences.

Intercede’s platform supports multiple passkey types, including FIDO2 security keys, device-bound passkeys, and synced passkeys, offering organizations flexibility in balancing security requirements with user convenience. Self-service enrollment capabilities reduce administrative overhead while empowering users to manage their authentication credentials efficiently. The platform’s RADIUS support ensures legacy application compatibility, allowing organizations to extend modern authentication capabilities across their entire application portfolio without requiring application modifications.

Strategic Market Positioning

The platform’s debut at a major international security conference underscores Intercede’s strategic focus on government and enterprise markets requiring high-assurance authentication solutions. The successful client acquisition in Germany demonstrates market receptivity to integrated authentication and credential management platforms. Organizations increasingly recognize the limitations of traditional authentication methods and seek comprehensive solutions that address phishing threats while supporting diverse application environments and deployment scenarios.

MyID Authenticate represents a significant advancement in enterprise authentication technology, delivering comprehensive passkey support across Windows environments, cloud services, legacy applications, and virtual private networks from a single unified platform. The solution’s phishing-resistant design, flexible deployment options, and post-quantum cryptography support position it as a strategic authentication infrastructure component for security-conscious organizations worldwide.