Lessons From a Financial Services Passkey Deployment
Source: YouTube · FIDO Alliance · published Feb 7, 2025 · 27:48
[BLUF] Branch Insurance successfully deployed Passkeys via a layered DeSCO integration over AWS Cognito to replace problematic SMS 2FA, prioritizing risk mitigation and user experience while navigating technical hurdles like OIDC timeouts and data migration 0:37.
Key Takeaways:
• Replaced SMS 2FA to resolve telco failures, security risks, and poor UX, serving as a key B2B2C case study 0:37.
• Layered DeSCO on AWS Cognito rather than replacing it to maintain low costs, avoid complex data syncs, and reduce blast radius 7:23.
• Mitigated single-tenant limitations by running a pre-migration campaign to ensure unique, valid user emails before switching to multi-tenant architecture 5:15.
• Addressed OIDC 5-minute timeout limits by initializing connections only after user input, reducing failed sessions from distraction 11:45.
• Enterprise SSO adoption was slower than expected, though password reset calls dropped significantly, highlighting the need for industry-wide Passkey normalization 13:30.
[Closing statement] Branch Insurance’s phased, layered migration strategy successfully modernized authentication while effectively managing technical and operational risks.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Identity & Access Management. Commonly maps to: Identity and Access Management (IAM), Security Architecture and Engineering. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
all right folks so we're g to get started um so this session is a continuation of the previous track which was around uh case studies around consumer deployments of pass Keys um and I had the great privilege of uh meeting uh the folks from Branch a few months back when we did a webinar together and I was actually really fascinated by this use case because it's I'm I'm not going to tell you too much about it because that's what that's what our wonderful speakers are here to do but this is a really really interesting case of a you like a B2B to see kind of a case uh kind of a use case and how to address that with pass Keys um and so please help me welcome our speakers today we have Nick Ern and our Katie goyberg from Branch Insurance speak with you about their deployment of pass Keys thank y…