
MyID FIDO & Passkey Credential Management
Overview
As an Intercede Bronze Partner, Unsung supplies and implements MyID FIDO & Passkey Credential Management for UK government and enterprise organisations adopting phishing-resistant authentication. It extends the MyID platform so that FIDO and passkey credentials are governed alongside PKI certificates from a single console, with the same policy control, visibility and lifecycle management.
Buying MyID FIDO management through Unsung
We provide impartial advice on the right licensing model and product mix, so you get value for money from Intercede.
We also offer:
- Specialist support. Our PKI specialists provide first-line triage, escalating to Intercede when needed.
- A deployment that fits your estate. We align FIDO policy with your existing smart card and certificate processes, directories and identity providers.
- Partner pricing through our Intercede partnership.
The Challenge
FIDO and passkeys are being adopted as a phishing-resistant alternative to passwords. For organisations already running PKI smart card authentication, this raises a governance question: how to manage FIDO credentials with the same rigour, policy control and audit trail as existing PKI credentials.
Without unified management, FIDO becomes a separate, ungoverned credential type with its own lifecycle, leading to visibility gaps and inconsistent policy. Organisations need one platform that applies consistent rules to both, shows every credential issued to each user, and revokes across all credential types when required.
What It Does
MyID brings FIDO and passkey credentials into the same governance framework as PKI. Administrators handle FIDO registration, issuance and revocation through the console used for smart cards and certificates. Policy controls define which users can register FIDO credentials, which authenticators are permitted and under what conditions they can be used.
The platform keeps a single view of every credential issued to each user, including smart cards, certificates, derived mobile credentials and FIDO authenticators. Events such as a leaver or a compromised credential can then be dealt with across all credential types at once.
How Unsung Helps
We help you plan FIDO adoption alongside your existing PKI, so both credential types sit within one governance framework. That covers authentication strategy, policy design, deployment and integration, plus practical steps for introducing FIDO into established smart card environments without disrupting users.
If your users need certificate-based access from mobile devices tied to their existing smart card identity, MyID Derived Credentials may be the better route, and if you are starting without a credential management platform, MyID CMS provides the foundation. We will advise on the right combination for your organisation.
Related Unsung Services
- PKI Consultancy: Advice on authentication strategy and unified credential governance.
- PKI Design & Build: Design and implementation of combined PKI and FIDO credential environments.
