Enterprise controlled authentication

Abstract

A method includes transmitting a challenge to a server as part of a request for a service provided by the server. The method further includes receiving, a signed response, wherein the signed response was generated using the challenge and is signed with a private key of the server. The method further includes, responsive to receiving the signed response, verifying the signed response with a public key corresponding to the private key of the server, the public key corresponding to a first mode of the authenticator device. The method further includes responsive to verifying the signed response, switching a current mode of the authenticator device to the first mode corresponding to the public key. The method further includes providing a second request to a user of the authenticator device to authenticate using one or more authentication factors corresponding to the first mode.

Dependencies are inferred from the claim text.