About GFPS IDS

Executive Summary

This proprietary service provides a standards-based, cryptographically secure authentication infrastructure. It implements modern enterprise best practices including OAuth 2.0 / OpenID Connect with PKCE, rotating refresh tokens, phishing-resistant FIDO2 passwordless authentication (passkeys), and SAML 2.0 for robust federated SSO. Designed with defense-in-depth principles, the platform equips administrators with centralized adaptive access controls, allowing dynamic authentication routing based on organizational groups, real-time geographic location, and network context.

Adaptive Access & Geo-Fencing

Administrators can define granular, zero-trust access rules applying to passwords, passkeys, badges, and Windows sign-in methods. Policies are dynamically evaluated against Active Directory membership, country codes, and specific geographic regions.

This enables sophisticated threat mitigation, such as geoblocking authentication attempts originating outside authorized borders while ensuring seamless access for trusted internal network traffic.

Phishing-Resistant Passkeys

Fully supports FIDO2/WebAuthn standards for a frictionless, passwordless experience. Users authenticate securely using device biometrics, hardware security keys, or cryptographic PINs.

Passkeys completely neutralize phishing attacks, credential stuffing, and password reuse vulnerabilities, providing the highest echelon of identity assurance.

Frictionless EdTech Access

Features specialized, secure badge login via dynamic QR codes, bridging the gap between rigorous cybersecurity standards and accessibility for young learners.

While the front-end user experience is simplified for primary education, the platform continues to enforce strict cryptographic validation, auditing, and organizational access controls on the backend.

System Architecture & Specifications