The modern-factor authentication baseline that ships with every Cybsis instance — listed here so the features are discoverable in the module catalogue, but never billed separately.
- Passkeys / WebAuthn — phishing-resistant cryptographic credentials, multiple per account, AAGUID tracking. Hardware security keys (YubiKey, Titan, SoloKey) and platform authenticators (Touch ID, Windows Hello) are first-class.
- Estonian ID-card via Web eID — X.509 certificate with OCSP revocation, browser-extension-driven, nonce-bound challenge-response. Available to public and private sector.
- TARA SSO — Estonian state OpenID Connect covering ID-card, Mobile-ID, and Smart-ID in one flow. Public-sector buyers only (TARA is a state-run service).
Password authentication is still supported as a fallback. For directory integration on top, see Active Directory / LDAP or the Microsoft 365 Connector. For commercial Mobile-ID / Smart-ID for private-sector deployments, talk to sales.