September 18 – September 22

Interoperability Testing Event: FIDO2 & FIDO UAF

Overview: interoperability testing events are a forum for implementers to gather and validate that their implementations are compatible with each other. Interoperability testing is also a functional requirement for server and authenticator product certifications. 

All testing is completed remotely. Given the testing environment, participants that are completing testing for an authenticator should be prepared to set up both web camera viewing and screen sharing capability so that the interoperability steps can be visually verified as they are performed, including all actions being performed on all devices.  

Each implementer will test their implementation with those of other implementers. For example, a FIDO2 Server will test with all FIDO2 Authenticators present at an event; likewise, a UAF Client/Authenticator will test with all UAF Servers. For each combination of participants, the corresponding UAF and FIDO2 testing procedures listed below will be performed. Implementations showing that they can pass the testing procedures with all the other implementations at the event, or that can show that any failed testing procedures are not due to their implementations being non-conformant with the FIDO specifications, will pass the interoperability event and remain eligible for proceeding to the next certification step.

Prerequisites: prior to registering for an interoperability event, an implementation must pass conformance testing self‐validation and the implementation must not be changed before the interoperability event. Participants must register at least 12 days prior to the event. A FIDO Certification Non-disclosure Agreement (NDA) is required to protect all test participants’ confidential information. If not previously completed, please contact certification@fidoalliance.org. A copy of the NDA can be found here.

Implementers are strongly advised to participate in pre-testing. Pre-testing is scheduled to take place the week prior to each event. The intent of pre-testing is to give the companies that will be participating in the interoperability event the ability to exchange software, metadata, and test with each other ahead of the event. For those implementers that opt-in to pre-testing, their contact information will be shared with other implementers ahead of the event so that they may communicate with each other to share the appropriate information and perform pre-testing.

Cancellation: in the event that there are not enough implementations to hold an interoperability testing event, the event will be canceled and potential participants will be notified 10 days before the event.

Availability: interoperability events are held at least once every 90 days for active versions of the specifications, this includes all versions that have not yet reached a sunset date. A schedule of all upcoming events can be found here.

Related Events

• 

  User Authentication Interop Testing Event (Remote)

  December 11 – December 15

The post User Authentication Interop Testing Event (Remote) appeared first on FIDO Alliance.

September 21 @ 8:00 am – 8:30 am PDT

Phishing attacks are not new, but they are becoming more advanced. With emerging strategies such as ‘screen scraping’ and ‘reply attacks’ becoming as prevalent as historical end-user targeting via social engineering, traditional approaches to authentication just aren’t as viable and expose the organization to too much risk.

In this fireside chat with Forrester Research, learn more about new attack strategies being employed by bad actors (such as AI), the alternatives for becoming more phishing resistant, and best practices for staying ahead of this important threat vector.

The post Fending off Phishing: How to Enhance Authentication as Bad Guys Get Better appeared first on FIDO Alliance.

September 27 @ 2:00 pm – 3:00 pm EDT

Implementing passkeys (or thinking about it)?

Join our webinar to learn how you can accelerate your customer-facing passkey deployment using research-backed UX guidance. Discover how prioritizing UX can elevate CX metrics and business outcomes. Learn which of the FIDO UX Guidelines are applicable to your use cases and leverage the free templates and user-centric components. Experience the power of pre-built passkey touchpoints along with real-life examples, gaining insights into successful strategies and delivery timelines. 

Key takeaways: 

• Jump-start your customer-facing passkey deployment with research-backed UX guidance
• Experience the power of pre-built passkey touchpoints and user journeys
• Hear examples of how companies have managed this process, along with delivery timelines
   

Presenters:

• Andrew Shikiar, Executive Director and CMO, FIDO Alliance
• Kevin Goldman, Board Member & UXWG Chair, FIDO Alliance; Chief Experience Officer, Trusona
• John Summers, Chief Technology Officer, Trusona

The post FIDO Webinar: How to quickly passkey-enable your website using the FIDO UX Guidelines, Sponsored by Trusona appeared first on FIDO Alliance.

October 16 @ 8:00 am – October 18 @ 5:00 pm EDT

October 16-18, 2023 
Carlsbad, CA (just North of San Diego) and Virtual

Overview

It’s time to modernize your authentication! Organizations around the globe are embracing a new way to authenticate with FIDO standards, moving past passwords and legacy forms of multifactor authentication to provide users with passkeys for phishing-resistant sign-ins. Their results? Strong security, lessened data breach risk, improved user experiences, faster sign-in rates, and reduced costs.

Join these industry leaders as they come together at Authenticate 2023, and get the latest tools and insights to get your organization on the path to strong, modern passwordless authentication.

Hosted by the FIDO Alliance, Authenticate is the industry’s only conference dedicated to all aspects of user authentication – including a focus on FIDO-based sign-ins. It is the place for CISOs, business leaders, product managers, security strategists and identity architects to get all of the education, tools and best practices to roll out modern authentication across web, enterprise and government applications.

Authenticate 2023 will be held at the Omni La Costa Resort in Carlsbad, CA, just North of San Diego with a bigger footprint for more attendees, sessions for all levels, a larger expo hall for companies bringing passwordless to fruition, and added opportunities for networking with your peers. The agenda will feature 101s, detailed case studies, technical tutorials, developer meetups, hands on labs, expert panels, and more.

Whether you are new to FIDO, in the midst of deployment or somewhere in between, Authenticate 2023 will have the right content – and community – for you.

Agenda and Speakers Announced

The conference agenda is available. The agenda will feature 101s, detailed case studies, technical tutorials, developer meetups, hands on labs, expert panels, and more. Our featured speaker for Authenticate 2023 is Rachel Tobac, White Hat Hacker & Social Engineering Expert. Plus, our full line-up of speakers have been announced.

The post Authenticate 2023 appeared first on FIDO Alliance.

November 30 @ 1:00 am – 3:30 pm EST

Stay tuned for more information!

The post Authenticate Virtual Summit: Authenticating Everything: Exploring FIDO for the Internet of Things appeared first on FIDO Alliance.

December 11 – December 15

Interoperability Testing Event: FIDO2 & FIDO UAF

Overview: interoperability testing events are a forum for implementers to gather and validate that their implementations are compatible with each other. Interoperability testing is also a functional requirement for server and authenticator product certifications. 

All testing is completed remotely. Given the testing environment, participants that are completing testing for an authenticator should be prepared to set up both web camera viewing and screen sharing capability so that the interoperability steps can be visually verified as they are performed, including all actions being performed on all devices.  

Each implementer will test their implementation with those of other implementers. For example, a FIDO2 Server will test with all FIDO2 Authenticators present at an event; likewise, a UAF Client/Authenticator will test with all UAF Servers. For each combination of participants, the corresponding UAF and FIDO2 testing procedures listed below will be performed. Implementations showing that they can pass the testing procedures with all the other implementations at the event, or that can show that any failed testing procedures are not due to their implementations being non-conformant with the FIDO specifications, will pass the interoperability event and remain eligible for proceeding to the next certification step.

Prerequisites: prior to registering for an interoperability event, an implementation must pass conformance testing self‐validation and the implementation must not be changed before the interoperability event. Participants must register at least 12 days prior to the event. A FIDO Certification Non-disclosure Agreement (NDA) is required to protect all test participants’ confidential information. If not previously completed, please contact certification@fidoalliance.org. A copy of the NDA can be found here.

Implementers are strongly advised to participate in pre-testing. Pre-testing is scheduled to take place the week prior to each event. The intent of pre-testing is to give the companies that will be participating in the interoperability event the ability to exchange software, metadata, and test with each other ahead of the event. For those implementers that opt-in to pre-testing, their contact information will be shared with other implementers ahead of the event so that they may communicate with each other to share the appropriate information and perform pre-testing.

Cancellation: in the event that there are not enough implementations to hold an interoperability testing event, the event will be canceled and potential participants will be notified 10 days before the event.

Availability: interoperability events are held at least once every 90 days for active versions of the specifications, this includes all versions that have not yet reached a sunset date. A schedule of all upcoming events can be found here.

Related Events

• 

  User Authentication Interop Testing Event (Remote)

  September 18 – September 22

The post User Authentication Interop Testing Event (Remote) appeared first on FIDO Alliance.