Yubico Launches YubiID to Bridge Identity Verification and Credential Enrollment
Yubico introduces YubiID, a new subscription service designed to integrate identity verification with credential enrollment and recovery, addressing a critical gap beyond phishing-resistant authentication.
Yubico, known for its YubiKey hardware authentication devices, has unveiled YubiID, a new subscription service entering limited early access. This innovative offering aims to bridge the gap between robust, phishing-resistant authentication and the crucial step of verifying a user's identity. The service is designed to ensure that the right person receives credentials and can regain access when necessary, addressing a significant challenge in modern identity and access management.
YubiID integrates credential enrollment and recovery processes across major identity platforms, including Microsoft Entra, Okta, and Ping. It supports the enrollment of credentials not only on YubiKeys but also on mobile phones, extending Yubico's reach to organizations that may not exclusively use hardware keys. This move reflects a growing industry recognition that while phishing resistance is vital, it doesn't inherently confirm that the correct individual possesses the credential or is the legitimate owner when requesting a replacement.
Derek Hanson, Yubico's field CTO, highlighted this evolving security landscape, noting that help desk functions have transitioned from mere operational controls to critical security checkpoints within most enterprises. YubiID seeks to formalize and streamline this process. The company is collaborating with several unnamed large organizations as design partners and plans a general availability launch for YubiID in the first half of 2027, with pricing details yet to be announced.
The core problem YubiID addresses is the disconnect between human resources (HR) and IT departments concerning identity verification. Traditionally, employees prove their identity to HR and then separately obtain login credentials from IT. YubiID aims to connect these steps, requiring identity verification for both initial credential enrollment and the subsequent enrollment of replacement credentials. This reduces opportunities for impersonation and strengthens the overall security posture.
"Recovery is such a weak spot for credential management," stated Andrew Shikiar, executive director and CEO of the FIDO Alliance. He emphasized that digital identity credentials can help reestablish a user's identity during recovery without relying on less secure knowledge-based secrets. Solving the recovery challenge, Shikiar added, requires a holistic approach involving technology, policy, regulatory alignment, user behavior, and business process design.
For organizations already invested in identity platforms like Okta, Ping, or Microsoft Entra, YubiID acts as a coordinator rather than a replacement. It builds connectors to enroll credentials from these providers and also accommodates homegrown identity systems. "We're not being an IDP," clarified CEO Jerrod Chong, stressing opportunities for collaboration over competition. The practical benefit lies in tighter coordination, enabling organizations to link their chosen verification processes to the enrollment within existing identity systems, thereby streamlining disconnected workflows.
The service is particularly relevant for enterprises managing large, distributed, or seasonal workforces. For example, a company onboarding thousands of temporary workers for the holiday season could leverage YubiID for both administrator-assisted, in-person enrollment and remote enrollment and verification. This offers flexibility and reduces the operational burden of connecting identity checks to access setup, benefiting sectors like transportation, retail, healthcare, and global services.
Yubico is entering a competitive market where identity providers and verification specialists offer overlapping capabilities. Microsoft Entra's verified account recovery and solutions from companies like Nametag and HYPR are already addressing similar needs. YubiID's differentiator, according to Chong, is its ability to connect verification and enrollment across multiple platforms, rather than being tied to a single identity provider. Furthermore, Yubico's established hardware business, which involves distributing and managing YubiKeys, provides a unique perspective on the challenges of global workforce credential management. Notably, YubiID also supports mobile devices, appealing to customers who find hardware key distribution difficult but still want to enhance their identity verification processes.