inWebo

inWebo delivers multi-factor authentication (MFA) and federated access solutions built around open standards. Supporting SAML 2.0, OpenID Connect, and OAuth 2.0, it functions as an identity provider for web and SaaS single sign-on. The platform is best known for its patented deviceless MFA—using browser-based cryptography instead of hardware tokens or mobile apps. Acquired by TrustBuilder in 2022, inWebo continues under the TrustBuilder brand, maintaining its security and developer integration capabilities.

Key Capabilities

• Standards-based federation: Operates as a full-featured OpenID Connect, OAuth 2.0, and SAML 2.0 IdP for secure, standards-compliant authentication across applications.

• Deviceless MFA: Uses browser-bound cryptographic credentials to deliver frictionless MFA without requiring dedicated devices or mobile apps.

• FIDO2/WebAuthn authentication: Supports passkeys and hardware security keys for passwordless, phishing-resistant login experiences.

• Flexible token options: Offers OTP, push, and software/hardware token-based authentication across mobile, desktop, and browser environments.

Limitations

• Branding transition: Now positioned under the TrustBuilder MFA product line; new deployments and documentation use TrustBuilder branding.

• Deployment flexibility: Delivered primarily as a managed SaaS; on-premises versions exist for regulated sectors but are less documented publicly.

• Provisioning support: No confirmed SCIM 2.0 endpoints for automated user provisioning; synchronization typically handled through IdP or directory connectors.

• Governance scope: Focused on MFA and access control; it does not provide full identity governance or lifecycle management capabilities.

• API depth: While integration APIs exist, available documentation on rate limits, versioning, and advanced management features is more limited than major enterprise IDaaS platforms.