RSA has announced a set of passwordless capabilities that extend beyond web single sign-on to cover desktop and laptop logons, with an emphasis on high-assurance and regulated environments. Unveiled at the Gartner Identity & Access Management Summit, the new features are delivered through RSA ID Plus and RSA ID Plus for Microsoft Entra and are designed to protect Windows and macOS endpoints with phishing-resistant authentication that satisfies U.S. federal requirements.
The company is enabling users to log into devices using a range of passwordless methods, including tap-based access with the RSA iShield Key 2 hardware authenticator, which is positioned as an AAL3 device aligned with Executive Order 14028 and OMB M-22-09 guidance. For situations where hardware tokens are impractical or connectivity is constrained, RSA is also supporting offline-friendly options such as OTP and FIDO2 credentials, with QR-based offline login planned for early 2026. The goal is to remove passwords from the endpoint while still accommodating branch offices, air-gapped systems, and other constrained environments that often lag behind cloud SSO.
Beyond workforce endpoints, RSA is pitching the new capabilities to organizations that must secure shared workstations, operational technology, and users in high-risk sectors such as defense, critical infrastructure, and financial services. The company highlights use cases like contact centers and industrial control rooms, where traditional MFA is either too slow or too difficult to deploy consistently. In addition, RSA is rolling out Identity Security Posture Management features that aim to give security teams a consolidated view of identity risks across cloud and on-premise systems, using analytics to identify misconfigurations, weak factors, and policy gaps.
For CISOs, the announcement underscores how passwordless strategies are broadening from browser-centric passkeys to deeper coverage of legacy and hybrid IT. Closing the gap between cloud SSO and endpoint login is critical if organizations want to reduce credential theft, persistent local accounts, and lateral movement risk. At the same time, deploying hardware-grade authenticators and offline-capable flows raises questions around device lifecycle management, recovery processes, and integration with existing identity governance tools, all of which will be on the table as organizations evaluate whether RSA’s new offerings fit into their Zero Trust roadmaps.
Sources: Business Wire, Yahoo Finance, RSA
—
By the ID Tech Editorial Team
