MY-Keys | Memority Documentation

Centralized multi-factor authentication

Strong authentication, user-friendly, at scale, for every population.

My-Keys is Memority's Multi-Factor Authentication (MFA) offer. It manages the end-to-end lifecycle of every second authentication factor, from enrollment to revocation, with policy-based allocation, full traceability, and audit-ready compliance.

My Keys belongs to the Control layer of the 360° Identity Factory, alongside My Access for access management.

See The 360° Identity Factory for the full picture.

How MY-Keys addresses the 3 IAM challenges

Identity-first security architectures. My-Keys extends MFA coverage to every population, with policy-based factor allocation and a full audit trail. It meets the MFA compliance requirements of NIS2, DORA, and ISO 27001.
Frictionless user journeys. Users enroll and manage their factors themselves, with unified PIN and biometrics and mobile push authentication. My-Keys turns browsers and smartphones into second factors: no dedicated hardware, no friction.
Business agility. Scale MFA to factory workers, seasonal staff, non-IT populations, partners, and consumers. My-Keys handles every context with an adapted factor, without a hardware rollout project.

Core capabilities

Integration and inbound provisioning

My-Keys adapts to your existing infrastructure as a central authentication repository, or integrates seamlessly with your authoritative sources. It supports automated flat-file import, native connectors, integration APIs, and customized manual interfaces for a gradual MFA rollout.

Complete management of second factors

My-Keys manages the full lifecycle of every factor type, from enrollment through update and expiry to revocation:

Windows Hello, YubiKey, and smart cards
OTP: Google Authenticator, Microsoft Authenticator, SMS, and email
Standard protocols: OATH TOTP, FIDO2, WebAuthn, passkeys, and X.509
Physical tokens
Extended compatibility with third-party MFA solutions through APIs

Workflow-based request validation

Control the allocation of strong authentication resources through robust workflows:

Allocation policies by population or business role
An integrated workflow engine for customized approval processes
Full traceability of allocations, modifications, and resets
Secure, controlled distribution of authentication factors

Secure enrollment with My-Keys Premium

Turn browsers and smartphones into reliable second factors, with no dedicated hardware and no friction:

Browser enrollment: secure local OTP generation in the browser's storage
Mobile enrollment: the multi-profile, multi-tenant Memority mobile app, with a configurable look and feel
Unified PIN and biometrics on iOS and Android
Mobile push authentication
Automated workstation and browser enrollment

Self-Service Authentication Hub

A dedicated interface lets users enroll new devices, manage existing factors, view their active second factors and status, and see the associated applications. Users manage their own security posture, and IT support ticket volume drops.

Help Desk and user support

Predefined functional scenarios help Help Desk teams quickly unblock users after factor loss. My-Keys supports multiple Help Desks with administration delegation, and secures every factor reset or revocation with full traceability.

Advanced dashboards and reporting

Interactive dashboards provide real-time visualizations, with filtering by role, perimeter, and population. Cross-offer data correlation connects My-Identity, My-Access, and My-Keys data, so you can proactively monitor security and usage metrics.

Compliance and regulatory alignment

Memority designed My-Keys to meet the MFA requirements of NIS2, DORA, ISO 27001, and equivalent frameworks. Full traceability of every factor allocation, modification, and reset is available for audit.

User interfaces

You operate My-Keys through the Functional Portal (End Users and Administrators) and configure it through the Technical Administration Portal.

See Memority Portals for more information.