The SurePassID Credential Provider is a Windows Credential Provider plug-in component that adds Two Factor Authentication (2FA) to any windows system. The SurePassID Credential Provider protect laptops, desktops, and servers from user when physically logging into a windows device or login via Windows Remote Desktop Services (RDS).
The SurePassID Credential Provider works with any SurePassID server (cloud, on-premises) and supports all the SurePassID 2FA supported OTP devices such as key fobs, display cards, Fido U2F USB tokens, soft tokens such as SurePassID Mobile Authenticator, Google authenticator, mobile passcode push technologies, mobile app push technologies such SurePass Mobile Push App, and SurePass Mobile Push App for Fido U2F.
SurePassID Credential Provider can be installed on the following 32 and 64 bit Windows versions:
- Windows 2008 – All versions
- Windows 2012 – All versions
- Windows 2016 – All versions
- Windows 7 – All version
- Windows 8/8.1 – All versions
- Windows 10 - All versions
The system supports offline authentication allowing users to work securely when they do not have any network connectivity; like in car, plane, and insecure locations. Offline options are:
- Single Factor Only - Revert to single factor only. No 2FA required
- Require 2FA - OTP passcodes (mobile, fob, etc.) or Fido U2F devices such as the SurePassId TapId and TapID Treo.
- Offline - Can authenticate users when there isn't any network connectivity
Other features:
- Master Passcodes - Admins can set strong passcodes for extreme emergency login.
- Configuration export/import templates - Configure a single windows system as the gold standard and then easily replicate to all other machines in the network. You can easily then burn it into your corporate windows system images so it is automatically present on any new windows systems.
You can review the full guide here.