Third-party application developers can easily embed cybersecurity compliant true MFA.
Power LogOn:
API
Power LogOn API adds powerful MFA security to Third-Party Applications.
Secure your Virtual Front Door with:
Power LogOn API:
API Client Side
3rd-party applications can use the Power LogOn client’s API to access application-specific logon entries that are secured by the user’s ID card.
By attempting to access the logon entry through the API, Power LogOn will prompt the user to present their card and enter a PIN (if required), so that the 3rd-party application is now protected via the Power LogOn card authentication process.
The API works independently from any card (i.e. works with all contact / contactless / PKI cards). Sample code for .NET is available for upon request.
API Server Side
Power LogOn Administrator includes an Application Programming Interface (API) that allows 3rd party applications to access Power LogOn Administrator functions.
The API is accessible through remote function calls and makes it possible to integrate 3rd party applications with Power LogOn Administrator, independent of the location and the platform that the 3rd party application is running on.
How can Power LogOn API help you?
- When a third-party application creates a new Power LogOn Manager entry, it must also specify an internal username and passcode for that entry as part of the parameters passed to the Power LogOn API. The internal username and passcode will be saved as part of an entry’s data on the credential.
- When the third-party application retrieves login data from the Power LogOn Manager, the application must first authenticate itself with the internal username and passcode.
- Before any logon entry credential data is returned to the calling application, Power LogOn Manager prompts the user to present their card and enter their PIN. The credential data will only be returned upon successful authentication of the card and PIN.
- For applications that require frequent access to credential data, the card and PIN authentication can be cached for a specified number of seconds. During the caching time, repeated authentication is not required.
Flexible and Scalable
Power LogOn API allows a third-party application to access Power LogOn’s MFA, IT Centralized password management security features. Functions an application can implement include:
- Start Application
- Perform logon via Power LogOn Auto-fill, button-click, or cursor-click functions
- Detect if Application is running and pop-up Power LogOn
- Detect if Application is running and perform Auto-fill
- Supply credentials to Application via “pull” mechanism (requires user interaction to insert card and enter PIN)
Secure, Automated Logins
The Power LogOn API consists of a single function. By calling this function, a third-party application can perform the following tasks:
- Start the Power LogOn application
- Create a new or overwrite an existing Power LogOn entry
- Read an existing Power LogOn entry
- Delete an existing Power LogOn entry
Since Power LogOn functionality interacts with a user’s ID card, the API calls may require the user to insert their ID card or enter their PIN for true MFA cybersecurity.
Availability
Power LogOn API is available through a network of approved resellers and distributors. If you’re interested in testing or implementing Power LogOn Mobile, please reach out to your IT reseller. If they are not an authorized Power LogOn reseller, they can contact us to become one.