Mosaic by Transmit Security is the only solution that enables you to to secure and orchestrate passkey journeys throughout the customer identity lifecycle. Mosaic’s seamless integration with Azure AD B2C and Entra External ID offers everything you’ll need to achieve this: passkeys, orchestration, fraud prevention, identity verification and strong device identification.

Although passkeys are secured with public key cryptography based on the FIDO2 standard, there are steps in the passkey lifecycle that introduce vulnerabilities. This is because certain scenarios require or enable users to use their original authentication method (often a password) as a fallback during passkey registration, account recovery and even authentication. There are also risks associated with lost or stolen devices and insufficient step-up authentication, allowing attackers to perform high-risk actions with a compromised passkey.

By adding Transmit Security’s phishing-resistant passkeys on top of Azure AD B2C or Entra External ID, you’ll optimize security and the customer experience (CX) by order of magnitude.

Mosaic services include:

• Dynamic orchestration: Transmit Security is the only Microsoft partner that offers identity orchestration, an essential unifying framework and powerful decisioning engine that automatically adapts customer identity journeys based on risk and trust signals, user context and device intelligence.
  With a drag-and-drop journey editor, it’s easy to build secure and streamlined passkey user flows. You can customize business logic so that users receive Trust, Allow, Deny or Challenge recommendations, based on the context of each individual’s typical, historical behavior. You can choose to permit only users who receive a Trust or Allow recommendation to complete passkey enrollment, while requests marked Deny or Challenge can be rejected or challenged with an automated identity verification flow.
  

• AI-driven fraud prevention: Orchestration continuously ingests data from Mosaic’s best-in-class fraud detection engine. Leveraging AI and ML, it analyzes hundreds of telemetry data points to analyze risk and trust in real time.. With behavioral biometrics, threat intelligence and network intelligence, the fraud detection engine determines with a high level of assurance (LoA) if the user is the account owner or a bad actor, generating recommendations to Trust, Allow, Challenge, or Deny. Orchestration then instantly triggers the appropriate user flow.

Another key differentiator that sets Mosaic apart is strong, multi-layered device identification, a robust alternative to traditional device ID, relying on cookies and other fraudable identifiers. With a combination of device crypto-binding and device fingerprinting, Mosaic ensures that the device belongs to the legitimate account owner and is the same person of the user who is registering a passkey.

• Identity verification: For new and returning users, orchestration can invoke identity verification (IDV) to ensure it’s the legitimate account owner who is registering, authenticating or recovering a passkey. Only Transmit Security provides native, risk-aware IDV that examines photo IDs, selfie liveness and facial biometrics within the context of real-time risk/trust signals. AI models detect fake IDs, deepfakes, synthetic identities and other tricks that slip past point solutions.

By combining identity orchestration with AI-driven fraud prevention and identity verification, Mosaic’s integration with Azure AD B2C not only secures passkey journeys but also optimizes the user’s registration, login, recovery and step-up experiences.