FIDO Paris Seminar

1. Classification: Public
Merck operates as EMD Group in the U.S. and in Canada.
Andreas Pellengahr
Merck KGaA, Darmstadt, Germany
Paris, April 10th, 2024
Own your passkeys, authentication, onboarding & recovery
Moving Beyond
Passwords

2. Classification: Public
Own your Identities
Credentials
Authentication
Onboarding & Recovery

3. Classification: Public
Credentials
Store your passkeys in your own FIDO server
Moving Beyond Passwords | for FIDO Paris Seminar | by Merck KGaA | 2024-04-10
3
Self-Controlled
Password
AD
SMS, Call,
Authenticator App
Azure AD
Self-Controlled
Password
AD
+
Self-Controlled
Passkey
Thales, StrongKey, etc.
Foreign
Passkey
Thales, Microsoft,
Google, Okta, etc.
Only Password Password & 2FA Passkey
Decision

4. Classification: Public
Authentication
Sign in with Passkeys
Moving Beyond Passwords | for FIDO Paris Seminar | by Merck KGaA | 2024-04-10
4
2
3
1

5. Classification: Public
Authentication
Sign in with Passkeys – in unsupported Apps
Moving Beyond Passwords | for FIDO Paris Seminar | by Merck KGaA | 2024-04-10
5
App Browser
+

6. Classification: Public
Authentication
Sign in exclusively with Passkeys - Advanced Protection
Moving Beyond Passwords | for FIDO Paris Seminar | by Merck KGaA | 2024-04-10
6
Only Passkeys.
Password + MFA is not available.
For all human accounts.
Standard & Privileged.
For all apps.
Account-based rule.

7. Classification: Public
Onboarding and Recovery
Enforce secure verification mechanisms
Moving Beyond Passwords | for FIDO Paris Seminar | by Merck KGaA | 2024-04-10
7
Always verify
No manual workarounds. Not even by admins.
Only trust verified physical assets
SimCard-Check, Passkey-of-colleague, etc.
Don’t trust a single verification
SimCard-Check + Password, etc.

8. Classification: Public
Own your Identities
Credentials
Authentication
Onboarding & Recovery

9. Classification: Public
CHALLENGES
https://denniskniep.github.io/posts/02-fragile-passkey-ecosystem-for-enterprises

10. © FIDO Alliance 2024 Confidential
10
Moving Beyond
Passwords
Andreas Pellengahr, Merck KGaA, Darmstadt, Germany
FIDO Paris Seminar
2024-04-10