HID announced the availability of Enterprise Attestation in its FIDO authenticator portal of smart cards and keys, a FIDO standards-based capability that enables organizations to enforce only company-issued passkeys at registration.

Enterprise Attestation will help organizations strengthen device trust, gain visibility into authenticator origin and support high-assurance authentication without adding friction for users.

Passkeys are designed to address phishing, but enterprises also need assurance that the devices creating those credentials are ones they have issued and trust. However, FIDO released a study saying 20% of organizations cite strict regulations as a key barrier to passkey adoption.

Enterprise Attestation aims to fix this by verifying that the device being registered was issued by the organization. It is built into HID’s Crescendo authenticators and is supported by identity platforms such as PingOne.

Enterprise Attestation is part of the FIDO Alliance’s WebAuthn and Client to Authenticator Protocol (CTAP) specifications and is actively supported through the FIDO Alliance Enterprise Deployment Working Group.

The solution is designed to support compliance requirements, auditability, device provenance and lifecycle control in highly regulated industries such as financial services, healthcare and critical infrastructure.

HID said this capability could be useful to global organizations operating under frameworks such as the European Union’s NIS2 Directive, the Digital Operational Resilience Act (DORA, applicable to EU financial services organizations) and Zero Trust mandates, who gain a practical mechanism to enforce policy at the authenticator level.