Windows Credential Provider
The Veridium Credential Provider seamlessly integrates Veridium's robust authentication methods into Windows login and unlock scenarios, offering a secure and user-friendly experience for both physical and virtual desktop environments. This document provides a comprehensive guide to the Veridium Credential Provider, covering its architecture, setup, configuration, authentication process, and troubleshooting.
Architecture
The Veridium Credential Provider is a software component installed on Windows client machines, enabling users to leverage Veridium's authentication methods for accessing their Windows environments. This eliminates the reliance on traditional passwords, enhancing security and convenience.
Prerequisites
Before deploying the Veridium Credential Provider, ensure the following prerequisites are met:
Active Directory Domain Membership: The client computer must be joined to an Active Directory domain.
Veridium RA/EP Installation: The Veridium Registration Authority (RA) and Enrollment Proxy (EP) software must be installed and configured within the domain.
Certificate-Based Authentication: Certificate-based authentication must be enabled and configured in the Active Directory domain.
Benefits
Enhanced Security: Replace traditional passwords with Veridium's strong authentication methods, such as biometrics and mobile push notifications, to mitigate the risk of password-related attacks.
Improved User Experience: Provide a seamless and user-friendly authentication experience, simplifying login and unlock processes.
Versatile Deployment: Support both physical machines (laptops, desktops) and virtual desktop infrastructure (VDI) environments.
Centralized Management: Manage authentication policies and configurations through the Veridium Management Console.
Key Features
Seamless Windows Integration: Integrate directly with the Windows login and unlock screens for a native user experience.
Multi-Factor Authentication: Enable MFA for enhanced security, requiring users to verify their identity through multiple factors.
Passwordless Authentication: Eliminate the need for passwords, improving security and user convenience.
Biometric Support: Utilize biometric authentication methods, such as fingerprint and facial recognition, for secure and frictionless logins.
Mobile Authentication: Leverage the Veridium mobile app for push notifications, QR code authentication, and TOTP.
Flexible Configuration: Configure authentication policies and settings to meet specific security and user needs.