Navigating the implementation and roll out of passwordless authentication
summary
SMG implements FIDO passwordless tied to device posture and a risk-based policy that combines resource classification, user role and device managed status. Rollout follows design → pilot → awareness → staged rollout → ramp, executed in‑house (one IAM engineer), taking ~2–3 weeks of staged batches. Results: 15% natural adoption pre-campaign, 30% in month one; issues include a login‑domain migration that required passkey migration and vendor breaking changes (PKI, MDM). Recovery uses existing MFA/backups; goal is 100% via enforced MDM and richer device signals (EDR, patch state).
AI-written summary · about
chapters (16)
- 0:00Introduction to talk
- 1:05Why passwordless at SMG
- 2:48Target state for passwordless
- 5:20Implementation journey phases
- 7:08Pilot phase and testing
- 8:31Awareness and adoption strategies
- 9:12Rollout process and policies
- 9:55Ramp-up and adoption rates
- 11:19Key challenges faced
- 13:29Awareness campaigns at SMG
- 14:11Key learnings from journey
- 15:38User experience drivers
- 16:00Future outlook and goals
- 17:45Q&A session part 1
- 20:14Q&A session part 2
- 24:51Closing remarks
related talks
31mRolling Out Passwordless
43mPasswordless: a story of risk, protection and excellent UX
14mSecuring Authentication with and within FIDO
19mAdvanced Authentication Framework
18mShifting Authentication at Scale
28mLessons on the Road to Complete Customer MFA
05m“You still use the password after all” – Exploring FIDO2 Security Keys in a Small
41mUsing FIDO authentication to defend against account takeover