WiKIDClient - Dual-source

The WiKID Strong Authentication System is a dual-source, software-based two-Factor authentication system designed to be less expensive and more extensible than hardware tokens. Fundamentally, WiKID Strong Authentication works this way: A user selects the WiKID domain they wish to use on their token client. The are prompted for the PIN for that domain. It is encrypted with the WiKID Server`s public key - assuring that only that server can decrypt it with its private key - and sent to the WIKID server. If the server can decrypt the PIN and it is correct and the account is active, it generates the one-time passcode (OTP) and encrypts it with the client`s public key. The user then enters their username and the OTP into whatever service they are using, a VPN, website, etc., which forwards it to the WiKID Server for validation using Radius, TACACS+, LDAP or through our wAuth API for custom applications.