Evidian Authenticator vs AuthWire Authenticator

Evidian Authenticator is the client application of the Push authentication for Evidian Web Access Manager. It supports the Evidian push authentication, the network-less authentication by scanning QR Codes (QRentry), and HOTP/TOTP 2nd factors authentication (OATH) supported by major Web applications on Internet. Authentication modes supported: • Offline QRentry QR Codes: by scanning challenged QR Codes and entering manually the decoded challenge. • Push authentication after solely entering login identifier in a Web application protected by Web Access Manager. WAM may be on premise without direct connection from the mobile device or in the cloud or as a service. WAM as Identity Provider is compatible with the multi-factor (MFA) push authentication as a high level of authentication. • Identification without entering login name, by QR Code scanning. Authentication is then done using the previous seamless push authentication, right after the identification of the user in one of the user directory configured in WAM as a Service Provider or as an Identity Provider. • HOTP/TOTP standard one time password. Seeds may be entered manually or in more convenient way by scanning QR Codes provided by Web applications. More than 400 well known applications’ icons and links are preconfigured. HOTP/TOTP accounts are exportable as plain text, JSON, and password protected and AES256 cyphered JSON importable in Evidian Authenticator. Enrolled keys and accounts are protected: • By a PIN code managed by the application, independent of the mobile protection • By a Fingerprint Messages and notifications: When used with Evidian Web Access Manager, any modification of the user’s profile in WAM will generate a confirmation notification in Evidian Authenticator (GDPR). All account or key usages are tracked and kept in the history of Evidian Authenticator.

AuthWire Authenticator delivers strong, device-bound multi-factor authentication (MFA) for organizations with high security and compliance requirements. The app leverages cryptographic keys that are generated directly on the iPhone and securely stored in the device’s secure enclave – protected by Face ID, Touch ID, or system passcode. Now with support for Passkeys – enabling modern, passwordless authentication based on open FIDO2 standards. Ideal for Zero Trust architectures and secure user flows without shared secrets. The Authenticator is purpose-built for enterprise environments that demand maximum security. Its implementation aligns with BSI recommendations and meets the assurance level defined by NIST SP 800-63B (AAL3). Key Features: • Device-bound cryptographic authentication • Phishing-resistant push approval • Biometric authentication (Face ID, Touch ID) or system passcode • Secure key lifecycle management (no credential export) • Compatible with TOTP-based services • Passwordless login via Passkeys • Optimized for Zero Trust architectures through the AuthWire platform AuthWire Authenticator can be integrated as a second factor in existing infrastructure or serve as a central trust anchor within modernized identity stacks