Add passkeys and adaptive MFA to Duende IdentityServer. Without replacing your infrastructure.

Authsignal drops in on top of your Duende IdentityServer via API calls after credential validation. Ship phishing-resistant passkeys, a no-code rules engine, and pre-built UI. Live in weeks, not months.

Delivering world-class results for:
DKV
Inde
Gusman Y Gomez
First Credit Union
Trademe
Qualcomm
Air New Zealand
AMN Healthcare
Squirrel
MoneyGram
Simplicity
DKV
Inde
Gusman Y Gomez
First Credit Union
Trademe
Qualcomm
Air New Zealand
AMN Healthcare
Squirrel
MoneyGram
Simplicity

Duende IdentityServer vs. Authsignal + Duende IdentityServer

Capability
Duende IdentityServer alone
Authsignal + Duende IdentityServer
Passkey Support
Requires third-party WebAuthn component or custom development
Embedded passkeys anywhere in your app. Pre-built UI or SDKs for web and native mobile
MFA Options
TOTP via ASP.NET Identity. Other methods require custom development
+ SMS, email OTP, push, WhatsApp OTP, biometrics, magic links, all built in
Adaptive Authentication
No built-in adaptive authentication or risk scoring
Visual no-code rules engine. Deploy adaptive policies in minutes, not sprints
Policy Configuration
Code-based configuration in C#/.NET
No-code visual builder. Product, fraud, and compliance teams configure directly
Customization & UX
Custom development required for authentication UI
Fully brandable pre-built UI, or embed via SDKs into your existing application
Implementation
Full control but requires significant development for modern auth capabilities
API integration after credential validation. Pre-built UI or headless SDKs. Live in weeks

Fastest way to integrate MFA and passkeys with Duende IdentityServer

Ship passkeys and adaptive MFA without months of custom .NET development
Add a visual rules engine and conversion analytics on top of your existing IdentityServer infrastructure
Phishing-resistant authentication live in weeks, with pre-built UI or your own custom implementation
Passkey IconFacial recognition iconBiometric icon

From daunting rebuild to shipped in weeks

Drop-in

Drop in, no need to rip and replace

Your Duende IdentityServer investment stays. Authsignal integrates via API calls after credential validation. No user migration. No infrastructure changes. Your team ships modern authentication in weeks.
SECURITY

Adaptive security without the friction

The no-code rules engine applies the right authentication at the right moment, challenging high-risk actions with step-up MFA while keeping low-risk logins fast. Product, fraud, and compliance teams set the rules. Engineering ships once.
JOURNEY

Beyond login, across the customer journey

Passkeys at sign-in. Step-up at transaction. Verification at account recovery. Authsignal orchestrates authentication at every sensitive touchpoint, not just the login screen, all from a single integration.

3 ways to integrate with Duende IdentityServer

First Credit Union logo
“Implementing FIDO authentication through Authsignal has been a game-changer for our members’ digital experience. It’s secure, seamless and sets a new standard for trust in online banking.”

Herb Wulff

·

Treasury and Agency

Treasury and Agency Banking Manager

Partnering with Authsignal is simple and powerful

New · also for agents

Your trust layer, extended to AI agents.

Passkeys, step-up, consent, and token vaulting — the same primitives your customers already use, extended to authenticate the human behind an AI agent and constrain what the agent can do on their behalf.

Bankapp notification message

01

Start with a guided evaluation

Talk to our team to scope your integration and see a live demo tailored to your stack. Or get going today with a free trial.

02

Integration made easy

Follow our step-by-step guides to get up and running without friction.

03

Dedicated solutions engineering

Access real-time support via private Slack channel for tailored advice from our engineering team.

04

Flexible options

Drop-in authentication for production-grade security and compliance. Extend your existing identity stack, or replace it.

FAQ

Why choose Authsignal?
  1. Deploy passkeys and MFA in weeks instead of months.
  2. Flexible integration options including pre-built UI, UI components, or headless SDKs.
  3. A visual no-code rules engine for adaptive authentication policies.
  4. Real-time developer support, comprehensive documentation, and step-by-step integration guides.
  5. SOC 2 Type 2, ISO 27001, and FIDO Alliance certified.
How do I get started with integrating Authsignal and Duende IdentityServer?

Getting started is straightforward:

  1. Sign up for an Authsignal account.
  2. Configure Authsignal’s API keys in your Duende IdentityServer instance.
  3. Use our step-by-step documentation to enable passkey authentication and MFA flows. For a full walkthrough, check out our Duende IdentityServer integration guides.
What programming languages and SDKs are supported?

Server SDKs for Node.js, Python, Ruby, Java, C#, PHP, and Go. Client SDKs for Web (JavaScript/TypeScript), React Native, iOS (Swift), and Android (Kotlin). Plus a REST API for any language.

What does it cost to integrate with Authsignal?

You can start integrating on our free trial immediately. For production deployments, plans start at $1,099/month. Enterprise pricing is available for larger deployments. See our pricing page for details.

Which MFA methods does Authsignal support?

Passkeys (FIDO2/WebAuthn), biometrics, SMS OTP, email OTP, WhatsApp OTP, push notifications, authenticator apps (TOTP), and magic links. All methods are available from a single integration and managed via the no-code rules engine.

Resources and guides

Add passkeys and adaptive MFA to Duende IdentityServer with Authsignal.