Basic concepts

The following sections outline the basic concepts of the OneSpan FIDO UAF SDK.

Purpose of the OneSpan FIDO UAF SDK

The OneSpan FIDO UAF SDK can be used to implement the UAF service and adapt it to individual needs for passwordless securing of online services . With the SDK, you can implement a standalone FIDO UAF server to communicate with the relying party application and provide FIDO UAF server-side operations.

FIDO

FIDO (Fast IDentity Online) is an organization whose main goal is to reduce users' reliance on passwords. It proposes several frameworks (protocols) that enable passwordless authentication. These frameworks make use of PKI (Public Key Infrastructure) and other cryptography standards to maintain a high level of security while performing authentication without passwords.

The FIDO Alliance has designed and proposed three main protocols:

• UAF (Universal Authentication Framework): Aims to substitute password authentication. It provides passwordless, multi-factor authentication.
• U2F (Universal Two-Factor Authentication): Improves password authentication by adding a second factor to the authentication process.
• FIDO2 (inc. WebAuthn): Newer than the UAF and U2F protocols and provides better security than password-only mechanisms.