Yubico launches Yubico Enrollment Suite for enterprises

Yubico has announced the Yubico Enrollment Suite, which includes Yubico FIDO Pre-reg and the new YubiEnroll, aimed at facilitating passwordless, secure onboarding for enterprises.

Jeff Wallace, Senior Vice President of Product at Yubico, commented on the suite, saying, "Our customers have reiterated to us how important seamless onboarding for their employees is, regardless of the size of the organisation. Self-registration of security keys can both slow a deployment down and create user frustration. Yubico Enrollment Suite is a significant step toward helping enterprises, both big and small, select their path to stronger security throughout the entire lifecycle and seamlessly adopt phishing-resistant hardware security keys at scale."

The YubiEnroll client application is designed to aid organisations and partners, such as those using Okta Identity Cloud, in enrolling YubiKeys on behalf of end users. This initiative aims to streamline the process for IT teams, allowing an "enroll on behalf of user" function during in-person onboarding or in areas where Yubico FIDO Pre-reg services may not be easily available.

YubiEnroll's features include support for Windows-based applications, enabling the enrolment of FIDO credentials on behalf of users and configuring YubiKeys for usage. Plans are in place for further expansions of the toolset, including support for additional identity providers (IdPs).

Administrators are offered a range of YubiKey configurations, which include capabilities such as resetting YubiKeys, setting and managing PINs with options for forced changes and minimum length, as well as configuring user verification settings.

The application supports all YubiKey and Security Key models, compatible via either NFC or USB connection. Once the device is connected, YubiEnroll guides the user through the enrolment process.

YubiEnroll is tailored specifically for IT staff and administrators, simplifying the task of preparing, creating, and registering FIDO credentials with identity providers, thereby easing the process and reducing the hassle for end users.