The Futurae Authentication Platform is an API-driven solution that provides multi-factor authentication (MFA) and transaction signing for web, mobile, and smart device applications. Integration is facilitated through REST APIs, native mobile SDKs for iOS and Android, and a customizable web widget. The platform orchestrates a range of authentication methods, including push notifications, online and offline QR codes, TOTP/HOTP, FIDO2/WebAuthn, hardware tokens, and SMS, to enable passwordless login and meet Strong Customer Authentication (SCA) requirements. Organizations can embed security features directly into their applications or utilize a provided standalone authenticator app.
The platform's architecture incorporates risk-based analysis of device status, IP addresses, and user context for adaptive authentication and fraud detection. An Admin API, authenticated via HMAC-SHA256, is available for managing users, devices, and policies, while a Log API streams event logs as newline-delimited JSON (NDJSON). Technical capabilities include webhook callbacks secured with JSON Web Signatures (JWS), offline authentication, automated account recovery, and mobile device integrity monitoring to detect rooted or jailbroken systems. The system operates on a cloud-native, geo-redundant infrastructure with Swiss data residency, utilizing end-to-end encryption and minimizing the storage of Personal Identifiable Information (PII).
