Mobile Authentication & Authorization

Passwordless & Multi-Factor Authentication

ForgeRock provides flexible, simple to deploy, and easy to use mobile authentication, seamlessly integrated into the login process. Push Authentication enables secure, passwordless logins, and frictionless multi-factor authentication. And one-time passwords provide even more options to ensure the user is who they say they are.

  • Push Authentication provides secure notifications to mobile phones asking the user to approve login attempts with a simple swipe or using Touch ID, allowing for passwordless logins and easy-to-use multi-factor authentication.
  • Uses out-of-the-box standards-based solutions such as OATH and HOTP that allow a mobile phone as a second authentication factor by generating SMS or SOFT-TOKENs.
  • Offers option for additional authentication factors, including one-time passwords sent to mobile phones, hardware tokens, biometric devices, and more — a requirement for highly sensitive applications and sites.

Transactional Authorization

Enable consumers to securely and conveniently approve high risk transactions and events, via mobile phone notifications. Push authorization provides an approval mechanism that is event based, increases security, and reduces the threat window for malicious activity such as replay attacks.

  • Provides secure notifications to mobile phones asking the user to verify and approve high-risk transactions with a simple swipe or using Touch ID.
  • Improves security by requiring a user to perform additional actions when trying to access protected resources
  • Can be tied to any authentication chain to configure transactions with an authentication strategy that asks the user to reauthenticate before being allowed access to resources.
  • Authorization is event based, protecting against replay attacks.

Evolve your Security with the Mobile Authentication App

Simplify security with our out-of-the-box iOS or Android mobile authentication app. Receive and respond to mobile push notifications, provide strong multi-factor authentication, generate one-time passwords, and deliver easy and secure provisioning with QR codes. Recovery codes can be used in the event of lost or stolen devices. You can even take the source code for the app and customize it to your exact needs. This makes it quick and easy for organizations to deploy mobile authentication for their users.


An Identity Platform Built with the IoT, CIAM, and You in Mind

Digital Identity

Your Customers...

Millions of customers use your digital services--whether cloud, mobile, or IoT. Protect their digital identities and consolidate customer information, so it's easy to create and personalize the customer experience. 


Their Things...

Cars, drones, street lights, gas pumps, wearables, medical devices... they all have a digital identity. With ForgeRock, you establish who these devices belong to, and decide how and with whom (or what) they interact.


Their Choice.

Protect and respect privacy. With ForgeRock, you can let your customers share data selectively. Ask them what’s okay to share, how, when, and with whom. Put them in charge, and they’ll put their trust in you.

Get Started with the ForgeRock Identity Platform

Manage billions of digital identities on new cloud, mobile, and IoT services, all with one unified platform. Try it out today.