Secrets Vault | Post-quantum passwordless and MFA for Entra ID

Secrets Vault Identity is a post-quantum authentication solution that unifies passwordless login, multi-factor authentication (MFA), and secure account recovery on top of Microsoft Entra ID.

Authentication is performed through intuitive image-based interactions, eliminating the need for passwords, codes, or external applications while maintaining a highly usable experience.

Designed as a flexible authentication layer, images act as authentication factors that can be used independently or combined with additional factors. This enables deployment across passwordless login, MFA, and account recovery scenarios, either complementing or replacing traditional methods such as SMS, OTPs, or authenticator apps.

The solution derives NIST-approved post-quantum cryptographic keys on demand directly on the user’s device. No secrets, credentials, or biometric data are stored or transmitted.

Architecture

Secrets Vault Identity operates as an external authentication layer integrated with Microsoft Entra ID, without requiring changes to existing applications or infrastructure.

Deployment flexibility

• ISV-hosted SaaS: fully managed service operated by the vendor, with no infrastructure required on the customer side


• Client-less access: works from any browser or device with no installation required


• SDK support: integrate natively into mobile applications and custom authentication flows


• Standards-based integration: OIDC for authentication and SCIM for automated user provisioning with Microsoft Entra ID

Use cases

• Passwordless authentication: combine an image with PIN, pattern, edge biometrics and passkeys


• MFA complement or replacement: introduce stronger factors without SMS costs or requiring additional apps


• Secure account recovery: enable users to post-quantumly authenticate using memorable images instead of traditional weak recovery channels

Key capabilities

• Image-based authentication with high usability


• Unified model for passwordless, MFA, and recovery


• NIST-approved post-quantum cryptographic protection


• SCIM-based user and group provisioning


• OIDC integration with Microsoft Entra ID


• Compatible with legacy systems, BYOD, and shared devices

Learn more

Security architecture and approach

No passwords. No stored secrets. No reliance on weak recovery factors.

Secrets Vault Identity enables organizations to strengthen identity security, reduce operational costs, and prepare for future quantum threats without disrupting existing IAM infrastructure.