SAM FIDO2 Identity Server
Passwordless Mobile Data Encryption, Authentication, and Identity Solution
SAM FIDO2 Identity Server
SAM FIDO2 Identity Server is a passwordless mobile authentication and identity solution based on the FIDO2 standard, combining data encryption and transaction security. The solution ensures compliance with requirements for blockchain, cryptocurrency, mobile payments, data encryption, transaction encryption, system security, and authentication, addressing the security demands of modern digital ecosystems.
SAM FIDO2 Identity Server includes FIDO2 Server Software and Identity Server.
Built on a Zero Trust architecture, SAM FIDO2 Identity Server is designed for banks, financial institutions, large enterprises, and government agencies.
International Standards & Compliance
- NIST Post-Quantum Cryptography (PQC) Standard
- Compliance with ISO 9001:2015, ISO 14001:2015, ISO 27001:2022
- Compliance with GDPR, SOC 2 Type II, HIPAA, and PCI DSS
- Compliance with PSD2/PSD3 for Strong Customer Authentication (SCA)
- Full compliance with General Data Protection Regulation (GDPR)
- Compliance with local regulations:
- Philippines: AFASA, BSP 1213, 1214, 1215
- Vietnam: Circular 64/2024/TT-NHNN, Circular 50/2024/TT-NHNN, Circular 77/2025/TT-NHNN
- Singapore: MAS Technology Risk Management (TRM) Guidelines; MAS Cyber Hygiene Notices (MFA, encryption, risk-based access control)
- Malaysia: Bank Negara Malaysia (BNM) Risk Management in Technology (RMiT); Internet & Mobile Banking Security Requirements (Strong Customer Authentication, transaction signing, encryption controls)
Key Advantages
- Complete elimination of passwords
- Protection against phishing, man-in-the-middle, and credential stuffing attacks
- Strong authentication based on the international FIDO2 standard
- Alignment with Zero Trust and Risk-Based Access models
- Compliance with international security and personal data protection standards
- Multi-tenant Key Management
- Hybrid PQC (ECDH + ML-KEM)
- Zero Trust Architecture compatible
- On-Premise / Hybrid / Sovereign Cloud deployment
Modules in SAM FIDO2 Identity Server
FIDO2-Based Passwordless Authentication (FIDO2 Server Software)
SAM FIDO2 Identity Server is designed according to FIDO2/WebAuthn standards, leveraging Public Key Cryptography and eliminating password storage entirely. Private keys are securely stored on users’ devices.
SAM FIDO2 Identity Server complies with Functional Certification (End-to-End) requirements, including conformance testing, interoperability testing, and deployment validation, ensuring stable operation across various devices and authenticators.
Identity Server
The Identity Server supports widely adopted identity federation and access standards:
- Compatibility with OIDC/OAuth 2.0 and SAML 2.0
- Enables Single Sign-On (SSO) across web, mobile, and cloud platforms
- Supports Active Directory (AD) and LDAP, allowing organizations to leverage existing identity infrastructures without architectural changes