First CMS to support FIDO enterprise attestation

24 July 2025

INTERCEDE GROUP plc

('Intercede', the 'Company' or the 'Group')

Intercede MyID is the first CMS to support FIDO enterprise attestation.

MyID CMS and Yubico integration delivers complete solution for enterprise passkey management

Intercede, the leading cybersecurity software company specialising in digital identities, today announces that the latest version of its credential management system - MyID CMS - is the first to support Enterprise Attestation within the FIDO authentication framework. Integrated with Yubico's industry-first Enterprise Attestation-enabled security keys - the YubiKey, MyID CMS v12.15 delivers a complete solution for organisations requiring the highest levels of security and device control.

Enterprise Attestation represents a critical advancement in enterprise security architecture, providing organisations with the ability to identify and verify individual authenticators before allowing access to regulated and protected environments. Unlike standard FIDO implementations that prioritise user privacy through anonymous attestation, Enterprise Attestation enables IT administrators to maintain precise visibility and control over security devices deployed across their organisation.

Allen Storey, Chief Product Officer at Intercede said:

"Our customers are often used to the levels of control, management, tracking and traceability that PKI smart cards provide, where each device has a unique serial number that ensures they are only issuing keys that they own. Enterprise Attestation enables FIDO authenticators to be uniquely identified, bringing the increased security and visibility that our high-assurance customers require.

Organisations can now deploy passwordless authentication at scale while maintaining the device-level control that enterprise security policies demand. This combination of security and manageability removes the final barriers to widespread FIDO adoption in regulated environments."

The new capabilities within MyID CMS addresses a persistent challenge in enterprise FIDO deployments: the gap between strong authentication and organisational control. With Enterprise Attestation, only approved, company-issued authenticators are permitted to be issued to access sensitive systems, while maintaining detailed audit trails of device management across the organisation.

Key benefits of the integrated solution include:

·    Device-level visibility: Complete tracking and management of security keys throughout their lifecycle

·    Policy enforcement: Granular control over which devices can access specific resources

·    Audit compliance: Comprehensive logging and reporting for regulatory requirements

·    Risk mitigation: Immediate ability to identify and revoke compromised or lost devices

·    Seamless integration: Native support within existing identity and access management infrastructure.

In addition to Enterprise attestation, MyID CMS v12.15 adds support for PIN management features including minimum PIN length and forcing a PIN change at first usage. These enable 'issue on behalf of' scenarios and bring additional organisational control and security benefits.

Intercede's collaboration with Yubico gives organisations access to the complete technology stack needed for the deployment of YubiKeys at scale. YubiKey's are the first hardware authenticators to implement Enterprise Attestation capabilities, providing the foundation for the MyID CMS platform.

Jeff Wallace, SVP of Product at Yubico said:

"Enterprise Attestation is a critical capability for organisations that require precise control over their security infrastructure, enabling them to more easily track and allow only trusted and approved devices that are designed and configured specifically for the customers unique needs.

Our partnership with Intercede provides enterprises with a complete ecosystem for deploying FIDO authentication, while preserving the device-level visibility and management required in regulated environments."

Enterprise Attestation functionality is particularly valuable for organisations with strong security requirements, including government agencies, financial services, healthcare, and critical infrastructure providers. These sectors often require detailed device tracking and the ability to restrict access to only pre-approved authenticators.

Demonstration and Implementation

Intercede and Yubico will be providing in-depth education sessions on Enterprise Attestation implementation at the upcoming Authenticate conference on the 13^th to 15^th October 2025. Organisations can also watch a series of online demonstrations that showcase how MyID CMS addresses real-world scenarios, including device enrolment, policy management, and audit reporting functions.

To watch the videos, visit: www.intercede.com

Availability

MyID CMS 12.15 is available immediately for new and existing Intercede customers.

For more information about Intercede's Enterprise Attestation solution and to schedule a one-to-one demonstration, visit www.intercede.com

ENQUIRIES

About Intercede

Intercede is a cybersecurity software company specialising in digital identities and strong authentication, and its innovative solutions enable organisations to protect themselves against the number one cause of data breach: compromised user credentials.

The Intercede suite of products allows customers to choose the level of security that best fits their needs, from Secure Registration and ID Verification to Password Security Management, One-Time Passwords, FIDO and PKI. Uniquely, Intercede provides the entire set of authentication options from Passwords to PKI, supporting customers on their journey to passwordless and stronger authentication environments. In addition to developing and supporting Intercede software, the Group offers professional services and development capabilities as well as managing the world's largest password breach database.

For over 20 years, global customers in government, aerospace and defence, financial services, healthcare, telecommunications, cloud services and information technology have trusted Intercede solutions and expertise in protecting their mission critical data and systems at the highest level of assurance.

For more information visit: www.intercede.com