FIDO Seminar RSAC 2024

1. ©
2021
Yubico
1
1
Hyatt driving innovation and exceptional customer
experiences with FIDO passwordless authentication
©
2022
Yubico
Art Chernobrov
Director of Identity, Access, and Endpoints
Hyatt Hotel Corporation
David Treece
VP Solutions Architecture and Integrations
Yubico

2. ©
2023
Yubico
Deliver world-class guest experiences
to increase brand loyalty across digital
user journeys by modernizing
cybersecurity practices and
eliminating passwords
Hyatt Hotels Corporation is one
of the world’s best hospitality
brands and remains committed
to caring for people so they can
be their best.
Hyatt’s vision

3. ©
2023
Yubico
Legacy MFA gaps in guest experience

4. ©
2023
Yubico
Leadership decision to replace weak MFA methods and
move to a passwordless future to eliminate user MFA fatigue
Front-of-house colleagues ensure quality guest experiences
and various users across environments are secured
Deployed FIDO-based MFA for 'World of Hyatt' Loyalty
Program to increase security of confidential guest data
Journey to phishing-resistant MFA with FIDO

5. ©
2023
Yubico
Increase colleague and contractor workflow productivity
Delight guest experiences
Leverage investments in our technology stack
Embark on new deployments and audiences
Adopt FIDO keys with ‘Welcome to Hyatt’ kit and new hardware purchases
Considerations: Designing the right strategy

6. ©
2023
Yubico
Autopilot provides Windows
out-of-box experience
User is guided through the FIDO
security key registration process then
can securely access Hyatt applications
Enables passwordless provisioning
of a PC
Passwordless makes IT lives easier
Hyatt is leveraging Microsoft Intune and Azure AD

7. ©
2023
Yubico
IT configures:
Autopilot profile
Temporary Access
Pass (TAP)
IT communicates
Azure AD information to
Hardware distributor
for PC setup
Devices are shipped
directly to user
together with the
FIDO security key
Hardware distributor
uploads device IDs
Devices
automatically
join Azure AD,
enroll in Intune
User logs
in via TAP
Colleague unboxes
PC, turns it on
and connects it
to the internet
User registers
the FIDO security key
… and off they go!
Intune
How Hyatt deploys FIDO passwordless
Microsoft Azure AD, Intune, Autopilot + FIDO security keys

8. ©
2023
Yubico
Position it as a user benefit
Sell it as a huge benefit for users - no more
forgotten passwords and time-saved!
Make it easy and repeatable
Create technology policy to require FIDO security
keys and prepare meaningful training resources to
streamline deployment.
Start with low-hanging fruit
Every organization has legacy apps, but that
shouldn’t keep you from moving forward.
Lessons learned… it’s not that scary

9. ©
2022
Yubico
© 2023 Yubico
Thank you