WiKID Systems
WiKID is a self-hosted two-factor authentication (MFA) server that integrates with infrastructure using RADIUS, LDAP, and TACACS+, and offers SAML-based SSO specifically for Google Workspace (formerly Google Apps). It also provides a native Active Directory 2FA mode for admin/service accounts.
Key Capabilities
-
Network MFA via standards: Supports RADIUS, LDAP, and TACACS+ to add MFA to VPNs, firewalls, and NAS devices; most production setups use the RADIUS interface.
-
SAML for Google Workspace: Official guides describe configuring WiKID as a SAML endpoint for Google Apps/Workspace to enable single sign-on with one-time passcodes.
-
Native AD 2FA: A built-in Active Directory protocol allows replacing static AD passwords with OTPs, useful for administrative/service accounts and password-reset workflows.
-
APIs & client packages: SDKs and client installers enable custom app integration, token enrollment, and OTP delivery automation.
Limitations
-
Not a general IdP: Designed mainly for RADIUS/LDAP/TACACS+ and limited SAML use cases (e.g., Google Workspace).
-
SCIM / lifecycle management: No published evidence of SCIM 2.0 provider or consumer endpoints.
-
Documentation currency: Several integration guides pre-date current IdP ecosystems (Google Apps / JOSSO era); validate behavior on the latest release.
-
Operational overhead: Primarily self-hosted—administrators manage high availability, upgrades, certificates, and RADIUS/NAS configurations manually.