Add passkeys and adaptive MFA to Duende IdentityServer. Without replacing your infrastructure.

Authsignal drops in on top of your Duende IdentityServer via API calls after credential validation. Ship phishing-resistant passkeys, a no-code rules engine, and pre-built UI. Live in weeks, not months.

Delivering world-class results for:
DKV
Inde
Gusman Y Gomez
First Credit Union
Trademe
Qualcomm
Air New Zealand
AMN Healthcare
Squirrel
MoneyGram
Simplicity
DKV
Inde
Gusman Y Gomez
First Credit Union
Trademe
Qualcomm
Air New Zealand
AMN Healthcare
Squirrel
MoneyGram
Simplicity

Duende IdentityServer vs. Authsignal + Duende IdentityServer

Capability
Duende IdentityServer alone
Authsignal + Duende IdentityServer
Passkey Support
Requires third-party WebAuthn component or custom development
Embedded passkeys anywhere in your app. Pre-built UI or SDKs for web and native mobile
MFA Options
TOTP via ASP.NET Identity. Other methods require custom development
+ SMS, email OTP, push, WhatsApp OTP, biometrics, magic links, all built in
Adaptive Authentication
No built-in adaptive authentication or risk scoring
Visual no-code rules engine. Deploy adaptive policies in minutes, not sprints
Policy Configuration
Code-based configuration in C#/.NET
No-code visual builder. Product, fraud, and compliance teams configure directly
Customization & UX
Custom development required for authentication UI
Fully brandable pre-built UI, or embed via SDKs into your existing application
Implementation
Full control but requires significant development for modern auth capabilities
API integration after credential validation. Pre-built UI or headless SDKs. Live in weeks

Fastest way to integrate MFA and passkeys with Duende IdentityServer

Ship passkeys and adaptive MFA without months of custom .NET development
Add a visual rules engine and conversion analytics on top of your existing IdentityServer infrastructure
Phishing-resistant authentication live in weeks, with pre-built UI or your own custom implementation
Passkey IconFacial recognition iconBiometric icon

From daunting rebuild to shipped in weeks

Drop-in

Rebuilding authentication in-house can be daunting.

The cost and complexity shouldn't hold your business back.
SECURITY

Stay focused on what you do best. Trust Authsignal for authentication.

Enable passkeys and MFA in weeks, not months — with a visual rules builder and secure user journeys out of the box.
JOURNEY

Authentication across the entire customer journey

Passkeys at sign-in. Step-up at transaction. Verification at account recovery. Authsignal orchestrates authentication at every sensitive touchpoint, not just the login screen — from a single integration.

3 ways to integrate with Duende IdentityServer

Get started for free with up to 2000 monthly active users.

First Credit Union logo
“Implementing FIDO authentication through Authsignal has been a game-changer for our members’ digital experience. It’s secure, seamless and sets a new standard for trust in online banking.”

Herb Wulff

·

Treasury and Agency

Treasury and Agency Banking Manager

Partnering with Authsignal is simple and powerful

New · also for agents

Your trust layer, extended to AI agents.

Passkeys, step-up, consent, and token vaulting — the same primitives your customers already use, extended to authenticate the human behind an AI agent and constrain what the agent can do on their behalf.

Bankapp notification message

01

Start today, no cost

Enable passkeys and MFA in weeks, not months — with a visual rules builder and secure user journeys out of the box.

02

Quick & easy integration

Integration made easy: Follow our step-by-step guides to get up and running without friction.

03

Expert support anytime

Access our exclusive private Slack channel for tailored advice and real-time support from our team.

04

Flexible pricing options

Start for free. Drop-in authentication for production-grade security and compliance, without replacing your existing identity stack.

FAQ

Why choose Authsignal to integrate passkeys with Duende IdentityServer?
  1. Deploy passkeys and MFA in days instead of months.
  2. Enjoy flexible integration options, including pre-built UX/UI or headless setups.
  3. Leverage a visual no-code rules engine to create custom rules and policies effortlessly.
  4. Access real-time developer support, comprehensive documentation, and integration guides.
How do I get started with integrating Authsignal and Duende IdentityServer?

Getting started is straightforward:

  1. Sign up for an Authsignal account.
  2. Configure Authsignal’s API keys in your Duende IdentityServer instance.
  3. Use our step-by-step documentation to enable passkey authentication and MFA flows. For a full walkthrough, check out our Duende IdentityServer integration guides.
What programming languages or SDKs are supported for integration?

Authsignal offers SDKs for popular languages, including Java, JavaScript, Python, and more, ensuring smooth compatibility with Duende IdentityServer’s architecture. Read the docs here.

What does it cost to Integrate with Authsignal?

Integrating with Authsignal is completely free. You can create an account here. Authsignal also offers paid plans with additional features—learn more about our plans and pricing here.

Which MFA methods does Authsignal support and enhance?

In addition to passkeys, Authsignal supports a range of authentication factors, including Multi-Factor Authentication (MFA) methods such as SMS, email, TOTP, and push notifications. This ensures flexibility and security for various use cases and user preferences.

Why choose Authsignal?

Deploy passkeys and MFA in weeks instead of months. Flexible integration options including pre-built UI, UI components, or headless SDKs. A visual no-code rules engine for adaptive authentication policies. Real-time developer support, comprehensive documentation, and step-by-step integration guides. SOC 2 Type 2, ISO 27001, and FIDO Alliance certified.

What does it cost to integrate with Authsignal?

You can start integrating on our free tier immediately — up to 1,000 monthly active users at no cost. For production deployments, plans start at $1,099/month. Enterprise pricing is available for larger deployments. See our pricing page for details.

Which MFA methods does Authsignal support?

Passkeys (FIDO2/WebAuthn), biometrics, SMS OTP, email OTP, WhatsApp OTP, push notifications, authenticator apps (TOTP), and magic links. All methods are available from a single integration and managed via the no-code rules engine.

What programming languages and SDKs are supported?

Server SDKs for Node.js, Python, Ruby, Java, C#, PHP, and Go. Client SDKs for Web (JavaScript/TypeScript), React Native, iOS (Swift), and Android (Kotlin). Plus a REST API for any language.

Resources and guides

Drop-in MFA, passkeys & step-up auth — no migration required.

Add passkeys and adaptive MFA to Duende IdentityServer with Authsignal.