Corbado Features

Authentication type (8)

SMS-Based: Sends a one-time passcode (OTP) via SMS.
Voice-Based Telephony: Provides a one-time passcode (OTP) via voice-call.
Email-Based: Sends a one-time passcode (OTP) via email.
Hardware Token-Based: Supports hardware tokens, which are often USB-sized, fob-like devices that store codes.
Software Token: Offers software tokens, which are applications installed on a mobile phone, wearable devices, or desktops and generate time-based one-time passcodes (TOTP) that a user can easily copy. Software tokens work both online and offline.
Biometric Factor: Allows biometric factors such as fingerprints, faceprints, voiceprints, or other biometric information to be used as an authentication factor.
Mobile-Push: Offers mobile push authentication, which is a user-friendly method that does not require a user to copy a code, but rather accept or deny an authentication using a mobile application. Mobile push authentication only works when a user is connected to the internet.
Risk-Based Authentication: Analyzes users' IP addresses, devices, behaviors and identities to authenticate a user.

Multi-Device Sync: Allows the use of tokens on multiple devices. This feature can also be turned off if the user does not want this.
Backup: Offers encrypted backup recovery stored by the vendor.
Self-registration and self-service: Enables a seamless customer experience with self-registration and self-service functions, including account creation and preference management.
Authentication: Verifies user identity with authentication, which may include multiple multi-factor authentication methods.
Scalability: Scales to support growing a customer base.
Consent and preference management: Captures and manages a customer's consent and preferences to comply with data privacy laws such as GDPR and CCPA.
Social login: Offers users the option to sign in with social media accounts.
Customer data linking: Integrates with directories or other data stores that house customer data to create a complete view of a customer.
FIDO2-compliant: Offers FIDO2-enabled authentication method
Works with hardware security keys: Works with hardware security keys
Multiple authentication methods: Offer users multiple ways to authenticate including, but not limited to: mobile push on trusted devices, FIDO-enabled devices, physical security keys, keycards, smart watches, biometrics, QR codes, desktop app + pin, and others.
Offline or no-phone solution: Offers solutions when users are offline or do not have access to a mobile phone.

Quick Login: Expedites user logins using methods like a master password or password autofill.
Browser Extension: Integrates the tool with your browser for easy use.
Mobile App Usability: Integrates with your mobile device for use on mobile apps.
Multi-Device Use: Enables user to use the tool across multiple devices.
Admin Management: Allows an employer or administrator to manage employee access.

Uses Open Standards: Connections use open standards such as SAML or RADIS.
Mobile SDK: Offers developers a mobile software development kit to seamlessly add biometric authentication into their applications.
Workforce Authentication: Integrates with identity and access management (IAM) solutions to manage workforce authentication.
Customer Authentication: Integrates with customer identity and access management (ICAM) solutions to manage customer authentication.

Encryption: Encrypts all data transfers using end-to-end encryption.
Audit Trails: Provides audit trails to monitor useage to reduce fraud.
Regulatory Compliance: Complies with regulations for strong customer authentication such as KYC, PSD2, and others.
Bi-Directional Identity Synchronization: Keep identity attributes consistent across applications whether the change is made in the provisioning system or the application.
Policy Management: Enables administrators to create access policies and applies policy controls throughout request and provisioning processes.
Cloud Directory: Provides or integrates with a cloud based directory option that contains all user names and attributes.
Application Integrations: Integrates with common applications such as service desk tools.

Adaptive MFA: Possesses AI-driven triggers to determine when to require MFA or stronger authentication rather than always requiring it.
Anomaly Detection: Builds profiles of known devices/environments per user and flags deviations such as new devices, new networks, and/or suspicious locations as higher risk.
Fraudulent Login Detection: Spot fraudulent behavior, such as account takeover attempts, credential stuffing, bots, and brute force attacks through the use of AI.
Adaptive Authentication Policies: Uses machine learning to analyze past authentication events and suggest optimizations to security policies (e.g. thresholds, triggers) or to adjust rules over time.
Risk-Based Authentication: Leverages AI to assign a risk score to a login attempt based on context, device, IP, historical patterns to dynamically decide whether to prompt for MFA, additional challenges, or allow seamless login.