Method and apparatus for seamless out-of-band authentication

A processor comprising:

• at least one core to execute instructions;
• and
• a manageability engine coupled to the at least one core to perform security operations, the manageability engine including:
• a multi-factor authentication logic to cause a request for an out-of-band (OOB) authentication to be sent from a system including the processor to a backend system associated with an application to which a user seeks access;
• a wireless authentication logic to create a secure channel between the system and a mobile device in proximity to the system, the mobile device comprising an authorized device of the user, and to receive via the secure channel an OOB authentication value from the mobile device seamlessly to the user, the mobile device to receive the OOB authentication value from the backend system responsive to the OOB authentication request, wherein the multi-factor authentication logic is to:
• cause the mobile device to be securely paired with the system and to create at least one shared key;
• receive from the mobile device an encrypted token including the OOB authentication value and a nonce, the nonce included in the OOB authentication request;
• decrypt the encrypted token using the at least one shared key;
• and
• update the nonce and send an updated token to the backend system, the updated token including the OOB authentication value and the updated nonce.