Authentication

Last update:
Aug 21, 2026
This section provides an overview of the Aikyam Platform’s authentication framework, including supported methods such as Basic Authentication, SSO, MFA, TOTP, and passkey authentication for secure and seamless user access.
Authentication in the Aikyam Platform ensures that only verified users can securely access system resources and perform authorized actions. The platform’s authentication framework has evolved to meet modern security and usability requirements. Initially, the platform implemented a basic username–password mechanism to validate user identity. Over time, this evolved into a more robust authentication model integrating single sign-on (SSO) and multi-factor authentication (MFA) to enhance security and user convenience.
The platform now supports the following authentication types:
  • Basic authentication: Uses traditional credentials for direct sign-in.
  • Single Sign-On (SSO): Allows users to access multiple Aikyam applications with one set of credentials.
  • Multi-Factor Authentication (MFA): Requires additional verification, such as a one-time password or authenticator app approval, to strengthen account security.
  • Time-Based One-Time Password (TOTP): Generates time-sensitive verification codes using an authenticator application.
  • Passkey Authentication: Provides a passwordless, phishing-resistant sign-in experience. Passkeys are based on public key cryptography, where a private key is stored securely on the user’s device and a public key is registered with Aikyam. Users can authenticate using device-level verification methods, such as fingerprint, face recognition, or PIN. These enhancements reflect Aikyam’s commitment to maintaining high security standards while delivering a consistent and frictionless authentication experience across all integrated services.
  • Phone-Based Identity Confirmation (PBIC) : A recovery-only identity verification method used during account recovery to confirm a user’s access to a phone number and its association with their identity. PBIC acts as a fallback mechanism when standard authentication methods are unavailable and does not apply to normal sign-in flows.

On this page

Powered by Aikyam @2025 All rights reserved