Passwordless SSO: Extend MFA login to your SSO

HYPR eliminates the need for passwords and multiple push authentication requests. With our advanced passwordless SSO, your users achieve an unprecedented level of security and productivity.

The first step starts by authenticating with True Passwordless MFA into the desktop. Authentication is then automatically extended to your SSO login.

By combining HYPR with your single-sign on, you eliminate credential phishing and push bombing attacks while enabling users to log in 300% faster than traditional MFA.

Logging in with Passwordless SSO

When the user initiates login to an SSO- connected app, they are redirected to the identity provider (IdP). The IdP connects to HYPR to perform authentication.

HYPR authenticates the user through a public key cryptography challenge-response. The user provides the identification factors set up with their registered device, which unlocks the private passkey to sign the challenge. This gets matched against the public key, granting the user access to their corporate SSO services, and all downstream apps.

If you use HYPR for desktop login, then the verified identity is automatically passed to the SSO.

The user experiences all of this in a single, fast authentication flow. For example, on an iPhone with FaceID, you tap the notification that opens the HYPR Authenticate app, look at your phone, and you’re in.

We talked for the longest time, for years, about the future. And, it’s not the future anymore. It’s here…We are passwordless.

Alyson Ruff

Cyber Security Director of Identity and Access Management and Governance, Otis Elevator

HYPR has brought passwordless authentication to the mainstream. The emphasis on security and user experience allows companies to tackle account takeover fraud at a scale never before possible.

Abbie Barbir

Senior Security Architect, Aetna CVS Health

Learn More

HYPR's technology is a smart way to keep critical data where it belongs - close to the customer.

Executive Vice President, Mastercard

Learn More

We weren't just looking for MFA. We needed phishing-resistant authentication that did not confuse users or fragment the experience. Tying it into our existing identity stack made it rollout simple and enforcement consistent.

Clint Hardison

Navy Federal Credit Union

What are the key benefits and use cases of using HYPR for SSO?

Flexible authentication methods - HYPR supports a wide range of authentication methods, including biometric authentication, synced passkeys, device-bound passkeys, FIDO hardware security keys, and built-in platform authenticators.
Cross-cloud, cross-platform access - Whether your organization operates in a single-cloud or multi-cloud environment, HYPR ensures secure, frictionless access everywhere your users need to be.
Defense against advanced threats - HYPR offers full protection against today’s most sophisticated cyberattacks, including man-in-the-middle (MitM), credential stuffing, phishing, and push bombing attacks. By removing passwords from the equation and replacing them with strong cryptographic authentication, HYPR fortifies your SSO solution against threats targeting your workforce.
Desktop-to-SSO login - HYPR takes Single Sign-On (SSO) to the next level with HYPRspeed Desktop SSO. Once users authenticate with HYPR at their desktop, their verified identity is automatically passed to the SSO provider, granting access to downstream apps without requiring additional steps.
Fallback Authentication Without Compromise - Even fallback methods remain secure with options such as device-bound passkeys managed in the HYPR App or hardware tokens, ensuring consistent protection against phishing attacks.

How does passwordless MFA make SSO more secure?

The single most effective method to strengthen your SSO’s security posture is to use IdP-agnostic, phishing-resistant, multi-factor authentication. One of the major security issues with SSO is how easily attackers can phish, intercept or bypass traditional MFA methods that use SMS messages, one-time passwords, or push notifications. By removing phishable factors like passwords and authenticating using biometric data and public key infrastructure (PKI), you eliminate the potential for phishing, MFA bombing, and man-in-the-middle attacks.

Should I decouple authentication from my SSO?

Yes, it is not great practice to login to your identity provider using the same identity provider. One of the most effective methods of improving the security of single sign-on tools is by completely decoupling the authentication process from the SSO in the first place. SSOs are effective services for simplifying workflows and managing access to a user's suite of applications, but this places a significant target on its back for attackers seeking access to those user privileges. Separating authentication methods from your SSO mechanism and using a more secure passwordless authentication solution makes it much more difficult for attackers to bypass.

Does HYPR integrate with my SSO provider?

HYPR seamlessly integrates with all major SSO providers, including Okta, Entra ID, Ping Identity, OneLogin, and more. You can view all of HYPR's integrations here.