Authenticator is a multi-factor authentication application developed by Notakey, built on a public key infrastructure (PKI) foundation with hardware-level protection and support for electronic signatures. The application provides authentication verification through a REST HTTP-based API exposed by the Notakey Authentication Server (NtkAS), accessible via a .NET client SDK compatible with .NET Standard. Applications bind using OAuth 2.0 client-credentials authentication, supporting both application/x-www-form-urlencoded and application/json payload formats, and receive authentication responses containing user identity attributes and a KeyToken. The platform supports encrypted message exchange through cryptographic entities, enabling users to register public keys in the service registry and encrypt messages to other users' public key IDs. Authentication policies can incorporate fingerprint, face recognition, geolocation, additional PIN, and optional onboarding methods including SMS, WhatsApp, or QR-code based enrollment.
Authenticator is included in the Notakey Authentication Appliance, an on-premise component that aggregates user sources, enforces security policies, and functions as a RADIUS server or proxy. The appliance operates within a RancherOS environment, utilizing a reverse proxy and networking configuration to enforce secure HTTPS communication via TLS, with certificates obtainable through Let's Encrypt or manual provisioning associated with a dedicated DNS name. Authenticator integrates with on-premise Notakey appliances, Active Directory, Cisco AnyConnect SSL VPN, RADIUS servers (including proxy mode), and custom user sources, and is compatible with Windows Remote Desktop Credential Provider, MikroTik routers, and legacy web applications through provided plugins and APIs. The solution is designed to transparently add a second authentication factor to existing VPN and remote access infrastructure without requiring network modifications.
