YubiKey as a Service – Enrollment
Delivering organizations choice in creating phishing-resistant users and going passwordless. YubiKeys ready to activate like a credit card.
Pre-enroll YubiKeys for your employees
Go beyond phishing-resistant MFA and accelerate the creation of phishing-resistant users. With Enrollment, YubiKeys arrive pre-enrolled and ready to activate, reducing setup friction and enabling secure onboarding from the start. Organizations can choose from three enrollment options based on their deployment needs:
YubiKey as a Service – FIDO Pre-reg: A turnkey service that factory-programs YubiKeys and delivers directly to users globally.
YubiKey as a Service – Enroll app and SDK: An intuitive app connected to the FIDO Pre-reg infrastructure that allows an IT or HR admin to locally program YubiKeys on behalf of the user. Available in Limited Early Access.
YubiEnroll: A free command line tool that allows IT teams or partners to enroll YubiKeys on behalf of users and distribute them directly.
YubiKey as a Service – FIDO Pre-reg
A fully managed enrollment service
FIDO Pre-reg is a turnkey service that delivers pre-enrolled YubiKeys directly to employees, enabling passwordless login from day one. Keys are factory-programmed with user credentials and shipped globally, reducing operational overhead for IT teams.
Available exclusively through YubiKey as a Service, FIDO Pre-reg offloads delivery logistics end to end, reducing operational burden for both IT teams and users. FIDO Pre-reg is currently generally available with Okta, Versasec, and Ping Identity, and in Early Access with Microsoft with additional Identity Providers planned.
YubiKey as a Service – Enroll app and SDK (Limited Early Access)
Tech and non-tech teams use an app onsite
Through the Enroll app, organizations can enjoy an intuitive experience, and use the accompanying SDK to integrate YubiKey enrollment and recovery directly into their own workflows and systems.
Available exclusively through YubiKey as a Service, in Limited Early Access for Android. Now IT teams, HR departments, and onboarding teams can securely prepare and assign YubiKeys on behalf of users. This enables seamless onboarding and rapid deployment of phishing-resistant authentication, faster and at greater scale than ever before. This service is currently in Limited Early Access for Microsoft and Ping Identity customers.
YubiEnroll
IT teams and Partners use a free utility
A free option that allows IT teams or partners to enroll YubiKeys on behalf of users and distribute them directly, YubiEnroll is a command line interface tool meant purely for technical teams to enroll YubiKeys on short notice or in regions where turnkey delivery services may not be available.
Learn how Okta protected their global workforce with Enrollment
In 2024, Okta implemented FIDO Pre-reg to deploy YubiKeys across its global workforce, strengthening phishing-resistant authentication at scale. Okta selected Yubico for its leadership in hardware security keys and its ability to support a global deployment with the highest assurance levels.
Deployment goals focused on phishing-resistant onboarding, consistent recovery processes, and strong security with minimal administrative overhead. Challenges included global logistics, manual recovery onboarding, limited policy enforcement, and the lack of roaming authenticators.
“At Okta, we’re on a mission to ditch the password. As you’d expect, we use Okta FastPass for passwordless authentication for our global workforce. With Yubico, we saw an opportunity to leap the final hurdle to deliver an end-to-end passwordless experience.”
Download this free infographic to learn more about how Okta became an early adopter of FIDO Pre-reg, deploying YubiKeys to its entire global workforce to establish an end-to-end phishing-resistant authentication experience.
Let us know if you’re interested
New app and SDK in Limited Early Access: YubiKey as a Service – Enroll
Enrollment services, available exclusively on Android through YubiKey as a Service, deliver a complete registration experience designed for enterprise needs. Accelerate your journey toward phishing-resistant users and eliminate passwords with a scalable enrollment approach.
As part of expanding the scope of Enrollment services, Yubico is introducing a new app, currently in Limited Early Access. With feedback from enterprise customers during this phase, the final offering will be available as both a standalone app and an SDK. These capabilities will provide enterprises with the components required to build a custom experience for IT and HR teams for streamlined user onboarding onsite.
