Offering the broadest range of authentication methods and form factors, Thales allows customers to address numerous use cases, assurance levels, and threat vectors with unified, centrally managed policies—managed from one authentication back end delivered in the cloud or on premise.

Supported authentication methods include context-based authentication combined with step-up capabilities, OOB, one-time password (OTP) and X.509 certificate-based solutions. All authentication methods are available in numerous form factors, including smart card, USB token, software, mobile app, and hardware tokens.

Thales TCT offers both its own line of government-specific, high assurance authentication solutions and Thales CPL’s commercial-of-the-shelf authentication solutions.

What is MFA?

Multi-Factor Authentication (MFA) is a secure authentication method that bolsters digital security by ensuring that users truly are who they claim to be. MFA combines distinct factors to establish identity authenticity, including:

Something you know:

A password, PIN, or other secret information known only to the user.

Something you have:

Users’ possession of a physical item, such as a token or smart card, which verifies the user’s identity

Something you are:

Biometric identifiers, such as fingerprints or facial recognition.

Multi-Factor Authentication Solutions

Certificate-Based Smart Cards

Thales’s range of certificate-based smart cards offer strong multi-factor authentication in a traditional credit card form factor and enable organizations to address their PKI security needs. Thales’ smart cards offer a single solution for strong authentication and applications access control, including remote access, network access, password management, network logon, as well as corporate ID badges, magnetic stripes and proximity.

Thales’s certificate-based smart cards meet the highest security standards, including FIPS 140-2 Common Criteria CC EAL5+ and eIDAS compliancy, and enable compliance with security regulations. Thales TCT’s Smart Card 650 (SC650) is certified for use in defense networks.

Thales TCT Smart Card 650

SC650 enables strong two-factor authentication and proof-positive user identification in all PKI environments and is certified for use in Defense Networks. It supports numerous algorithms, X.509 digital certificates and on-card certificate validation.

Learn More

IDPrime PIV - PIV ID Credentials for Gov Agencies

IDPrime PIV

Thales’s IDPrime PIV  card is a FIPS 140-2 and FIPS 201 standards-based card for government agencies, state and local government organizations to issue users credentials that the federal government can trust. The same card can be used for either a CIV or PIV-I-based deployment depending on company policies and use requirements. IDPrime PIV cards deliver high levels of security for identity management, interoperability and trust with federal agencies and departments as well as serving as a form of passwordless authentication.

Learn More

ID Prime Smart Cards

IDPrime Smart Card

Dual interface IDPrime smart cards are Minidriver-enabled PKI certificate-based smart cards that provide a high level of assurance of the identity of the user.  The IDPrime product portfolio is made up of a variety of cards with varying feature choices, including contactless technologies, certification type, and secure storage. SafeNet Authentication Client  extends the compatibility of these smart cards to any type of application in Windows environments or contact interface smart cards and are compatible with any environment through support by the SafeNet Authentication Client.

Learn More

IDCore Smart Cards

The SafeNet IDCore cards 230/3230 benefit from the state-of-the-art FIPS 140-3-L3 security features, required by US federal departments and agencies. These security enhancements are the newest releases of IDCore OS in the IDCore FIPS portfolio and benefit from the latest release of Java Card technology standards.

Learn More

Certificate-Based USB Token

Thales’s portfolio of certificate-based USB tokens offers strong multi-factor authentication in a traditional USB form factor, enabling organizations to address their PKI security needs. Thales PKI USB tokens offer a single solution for strong authentication and applications access control, including remote access, network access, password management, network logon, as well as advanced applications including digital signature, data and email encryption.

Depending on their configuration, the certificate-based USB tokens can be FIPS and CC certified.

eToken 5110+ FIPS

TAA-compliant, ultra strong authentication, security in a convenient, portable form factor. Secure remote and network access, as well as certificate-based support for advanced security applications, including digital signature and pre-boot authentication.

Learn More

eToken 5300 FIPS

Deploy the military-grade security of PKI, while maintaining a convenient solution for employees. Used with any USB connection for IAM applications such as network authentication, digital signatures, email encryption & other advanced services based on PKI.

Learn More

eToken 5300 USB-C

Portable two-factor USB-C authenticator with advanced smart card technology, customizable logo and presence detection. Used with any USB connection for IAM applications such as network authentication, digital signatures, email encryption & other advanced services based on PKI.

Learn More

FIDO Devices

Thales FIDO2 security keys are offering organizations passwordless, phishing-resistant authentication, allowing them to stop account takeover and remove risk of unauthorized access to sensitive resources like SaaS applications and Windows endpoints.Thales FIDO2 security keys, USB Tokens and smart cards let you meet all your regulatory needs. They are FIDO2 and U2F certified. The combined PKI-FIDO keys are compliant with the US Executive Order mandate for phishing-resistant MFA and NIST regulations. They are FIPS 140-2 or Common Criteria (CC) certified.

Thales FIDO Devices

Thales FIDO2 security keys are offering organizations passwordless, phishing-resistant authentication, allowing them to stop account takeover and remove risk of unauthorized access to sensitive resources like SaaS applications and Windows endpoints.

Thales FIDO2 security keys support multiple applications at the same time. Use one that combines FIDO2, U2F, PKI and RFID to access both physical spaces and logical resources.

Thales FIDO2 security keys, USB Tokens (TAA-Compliant Available) and smart cards let you meet all your regulatory needs. They are FIDO2 and U2F certified. The combined PKI-FIDO keys are compliant with the US Executive Order mandate for phishing-resistant MFA and NIST regulations.

Learn More

Fusion Devices

New Phishing-Resistant Authentication from Thales

Many organizations have heavily invested in Public Key Infrastructure (PKI) to secure access to their internal sensitive resources. They want to leverage PKI to secure access to cloud based resources or move to a modern form of authentication (FIDO2), while maintaining the usage of PKI for Certificate-Based Authentication (CBA), digital signature & file encryption.

Fusion Series (PKI/FIDO)

The SafeNet eToken Fusion series is a set of USB tokens combining FIDO2 with PKI in a single authenticator

The SafeNet eToken Fusion Series enables organizations to utilize passwordless phishing-resistant authentication methods improving security for enterprise resources accessed from any device. This series allows presence detection and supports all PKI and FIDO use cases. The SafeNet eToken Fusion Series includes an option with CC certification.

SafeNet eToken Fusion is available in two form factors: USB-A and USB-C. The USB-C form factor enables users to authenticate to any cloud resources by plugging this token to their mobile devices (phone/tablets).

Learn More

One-Time Password (OTP) Hardware Authenticators

SafeNet’s One-Time Password (OTP) Authentication products generate highly secure one-time passwords ensuring that only properly authenticated users are authorized access to critical applications and data. SafeNet OTP authenticators are available in both time- and event-based versions, never expire, and require no battery replacements. They also comply with OATH standards and are ideal for remote access solutions.

SafeNet OTP 111/112 Token

OATH-certified OTP hardware token

The SafeNet OTP 111 and SafeNet OTP 112 are OATH-certified OTP devices enabling two-factor authentication to a broad range of resources. SafeNet OTP 111 replaces SafeNet OTP 110 and SafeNet OTP 112 replaces eToken PASS.

Learn More

SafeNet OTP Display Card

OATH-certified OTP token in credit card form factor

With a press of a button, the SafeNet OTP Display Card generates a highly secure, unique one-time passcode (OTP) that is linked only to your card. Secure access to any enterprise resource, be it cloud, web portals, VPNs, custom applications or virtual environments.

Learn More

Tokenless Authenticators

Thales offers many different tokenless authenticators. Utilizing this solution is a great way to offer your end user both security and convenience. Prevent hacking attempts and breaches by circumventing the need to provision and ship a physical token.

Out-of-Band or SMS

Delivered by SMS text messages or email, out-of-band authentication reduces the administrative overhead of a strong authentication solution by removing the need to install software or distribute hardware.

Learn More

Push OTP

Safenet MobilePASS+

SafeNet MobilePASS+ is a next generation software token that offers secure one-time passcode (OTP) generation on mobile devices, as well as single-tap push authentication for enhanced user convenience. Integrating out-of-the-box with a broad range of enterprise resources, the MobilePASS+ app offers frictionless authentication for users, as well as simple management for IT administrators.

Learn More

Grid Authentication

GrIDSure

Thales’s GrIDsure flexible authentication method allows an end-user to generate a one-time password without the requirement for hardware tokens or software applications. GrIDsure tokens work by presenting the end-user with a matrix of cells which contain random characters, from which they select a ‘personal identification pattern’ (PIP).

Learn More