System and method for authentication as a service

A client system including at least one hardware processor configured to perform operations comprising:

• receiving, from a communicatively coupled server, first authentication information comprising an Application ID (AppID);
• providing the first authentication information to a communicatively coupled hardware authentication device;
• receiving, from the hardware authentication device, second authentication information determined by the hardware authentication device based at least in part on the first authentication information;
• and
• providing the second authentication information to the server as registration data for the hardware authentication device, wherein the server is configured to register the hardware authentication device using the registration data.

A non-transitory, computer-readable medium storing instructions executable by a processor of a server, the instructions comprising instructions to:

• receive, from a client device communicatively coupled to the server, a cryptographic key handle and a first client signature generated by a hardware authentication device associated with the client device;
• register the hardware authentication device using at least the cryptographic key handle and the client signature as registration data for the hardware authentication device;
• and
• after registering the hardware authentication device:
• receive, from the client device, a login and a password;
• provide, to the client device, the cryptographic key handle of the registered hardware authentication device from the registration data of the registered hardware authentication device;
• receive, from the client device, a second client signature determined by the registered hardware authentication device based on a private cryptographic key of the registered hardware authentication device referenced by the cryptographic key handle;
• and
• in response to verifying the second client signature based on the registration data of the registered hardware authentication device, provide a computing resource to the client device.