Two-factor authentication

Two-factor authentication (2FA) is a method of identity control whereby a user has to present two separate pieces of evidence to verify their identity. When used for logins, this makes it much harder for unauthorized people to access devices and digital services than when just one factor, typically a password, is used.

Nexus offers products and services that support a wide range of user-friendly two-factor authentication (2FA) methods as well as provide powerful identity federation, single sign-on (SSO) and cloud SSO, enabling users to log in just once to access all managed resources.

Our Smart ID platform also ensures a high level of assurance (LOA) of the authenticator, and facilitates military-grade, PKI-based digital identities, enabling strong authentication.

In addition to logging in to various digital resources, 2FA is commonly used to enable digital signatures, email encryption and digital approvals.

Means of 2FA include:

  • A corporate identity in the app Nexus Personal Mobile on the smartphone + fingerprint, Face ID or PIN.
  • A virtual smart card in the laptop + password.
  • An invisible token in the web browser + password.
  • A PKI card in a PKI card reader connected to the computer + PIN.
  • A one-time password (OTP) generated by an OTP security token or OTP app + a static password.
  • A time-based one-time password (TOTP) generated by an authenticator + fingerprint, Face ID or PIN.
  • A customer ID in the app Nexus Personal Mobile on the smartphone + fingerprint or PIN.
  • A nation-wide electronic identity, such as Swedish BankID, in an app on the smartphone or computer + fingerprint or password.
The above list is not exhaustive – get more information on the supported authentication methods of Nexus’s versatile 2FA platform Hybrid Access Gateway below:

News, customer cases and blog posts