Embedding WiKID two-factor authentication in your Web application

One of our customers, Online Banking Solutions offers banks and financial institution software for commercial account management. They have embedded WiKID for two-factor and mutual https authentication in both the server side and on their optional client. The combined client facilitates the initial validation process, performs session authentication using the one-time passcode and performs mutual https authentication to prevent MITM attacks.

The product is a single-sign on solution that aggregates access to the numerous applications a single corporate banker might use:

This new feature of the Secure Desktop client enables the bank to package the desktop with a pre-determined list of web sites to be accessed with the embedded web browser. While the user can move back and forward, refresh the page or even detach the browser for better viewing, no web URL can be entered into the embedded browser.

This capability, when coupled with the OBS WiKID two-factor authentication, can be used to provide a bank single sign-on (SSO) service for multiple bank web applications.

And here's a screen shot of the combined client showing the OTP:

OBS uses the Java network client that comes with the server. We also have network clients for C#, PHP, Ruby and Python