TSV

Authentication Methods - TSV

Authentication methods are core security technologies used to verify that users are who they claim to be in digital systems. Various techniques exist including password-based authentication, multi-factor authentication (MFA), biometric authentication, single sign-on (SSO), certificate-based authentication, token-based authentication, and passwordless authentication. In recent years, passkey authentication based on the phishing-resistant FIDO2/WebAuthn standard has rapidly gained adoption, with major tech companies fully committing to passwordless transitions by 2025. The choice of authentication method is based on balancing security level, usability, and implementation costs.

authentication security MFA biometrics SSO passwordless FIDO2 WebAuthn passkey
code	slug	name	description	factorType
01	password-based	Password-Based Authentication	The most common authentication method using something the user knows (password).	Knowledge (Something you know)
02	multi-factor-authentication	Multi-Factor Authentication (MFA)	An authentication method that enhances security by combining two or more different authentication factors.	Combined (Knowledge, Possession, Inherence)
03	two-factor-authentication	Two-Factor Authentication (2FA)	A specific type of MFA that uses exactly two authentication factors.	Combined (2 factors)
04	biometric-authentication	Biometric Authentication	Authentication using physical characteristics such as fingerprints, face, or iris patterns.	Inherence (Something you are)
05	single-sign-on	Single Sign-On (SSO)	Authentication allowing access to multiple systems with a single login.	Protocol/Mechanism
06	certificate-based-authentication	Certificate-Based Authentication	High-security authentication using digital certificates and cryptographic techniques.	Possession (Something you have)
07	token-based-authentication	Token-Based Authentication	Authentication using physical or digital tokens to grant access.	Possession (Something you have)
08	passwordless-authentication	Passwordless Authentication	Authentication without passwords using more secure and user-friendly methods.	Combined (Possession, Inherence)
09	adaptive-authentication	Adaptive Authentication	Authentication that dynamically adjusts requirements based on risk factors.	Risk-based
10	hardware-security-keys	Hardware Security Keys	The most secure authentication method currently available using physical devices.	Possession (Something you have)
11	oauth-openid-connect	OAuth/OpenID Connect	Authentication and authorization protocols using third-party identity providers.	Protocol