Identity at the Heart of Security
LibyaOne Auth provides a unified hybrid identity platform for all government and enterprise services — from passwordless authentication to workload identity and Zero Trust policy enforcement.
Authentication Flow
Authentication Methods
Hardware-backed phishing-resistant authentication
Passwordless biometric and device-bound credentials
X.509 certificate-based government smart card auth
Time-based and HMAC one-time passwords
Out-of-band push approval for mobile devices
Platform biometrics via WebAuthn APIs
Platform Components
FreeIPA Core
Integrated identity management with LDAP, Kerberos, CA, DNS, and policy management.
Keycloak SSO
OpenID Connect and SAML 2.0 Single Sign-On for web applications and APIs.
Cloud IAM Bridge
Federation with AWS IAM, Azure AD, Google Workspace, and other cloud identity providers.
PKI & Certificate Authority
Internal PKI for issuing device, user, and service certificates with automated renewal.
Zero Trust Policy Engine
Real-time access decisions using OPA/Cedar policies with device and user risk scoring.
Passkey Service
Managed passkey infrastructure with backup, sync, and enterprise policy controls.