MFA Without the Device Dependency
Extend TOTP authentication in Okta and Microsoft Entra to brokers, partners, agents, contractors, call centers and global help desks with a secure, browser-based virtual authenticator.
No phone. No app to install. No authentication hardware to distribute.
Key Capabilities
Browser-Based Virtual Authenticator
Access TOTP through a web experience rather than a physical authenticator.
Phone-Independent Authentication
No mobile phone is required to retrieve the user's TOTP.
No Endpoint Installation
Nothing needs to be installed on the user's workstation simply to access the virtual authenticator.
No SMS or Voice Dependency
Routine TOTP authentication does not depend on telecommunications delivery.
Okta Integration
Extend TOTP authentication to users while Okta continues validating the authentication code.
Microsoft Entra Integration
Leverage OATH TOTP supported by Microsoft Entra without requiring the authenticator to reside on a user's phone.
Personal PIN
Protect access to the virtual authenticator with a user-specific PIN when configured.
Independent Enrollment Verification
Use a registered secondary email address to verify users during first-time enrollment.
Benefits
Stop Managing Authentication Devices
No phone numbers to collect, corporate phones to issue, or security keys to purchase, ship, replace and recover.
Onboard Short-Term Users Faster
Provide MFA to contractors and temporary workers without creating a physical authentication-device lifecycle.
Reach Distributed Teams Anywhere
Authenticate global help desks and outsourced providers without shipping authentication hardware across offices and countries.
Keep Your Existing IdP Investment
Keep Okta or Microsoft Entra. Keep your policies. Keep TOTP. Remove the physical-device dependency.
How It Works
1. Access the Virtual Authenticator
The user opens Credenti Extend through a supported web browser.
2. Unlock
When configured, the user enters their personal PIN to unlock their virtual authenticator.
3. View the TOTP
Credenti Extend displays the user's current six-digit time-based one-time password. The code automatically rotates based on the configured TOTP interval.
4. Authenticate
The user enters the code into the normal Okta or Microsoft Entra authentication prompt. The IdP validates the TOTP and applies the organization's existing authentication and access policies.
Built for the Extended Workforce
Brokers, Agents and Partners
Give brokers, financial agents, advisors and third-party partners enterprise MFA without issuing phones or installing software on devices owned by another organization.
Help Desks, Call Centers and BPOs
Authenticate distributed help desk teams, call center agents and BPO staff — shift-based and high-turnover — without shipping authentication hardware or relying on personal phones.
Contractors and BYOD Workforces
Provide MFA to short-term and BYOD users without creating a physical device lifecycle or installing corporate software on their endpoints.
Frequently Asked Questions
What is Credenti Extend?
Credenti Extend is a browser-based virtual authenticator that allows users to access TOTP authentication codes without requiring a physical mobile phone, SMS, voice calls, authenticator application, or physical TOTP token.
Can I use MFA without a phone?
Yes. Credenti Extend provides a phone-independent way for users to access TOTP authentication supported by Okta and Microsoft Entra.
Does Credenti Extend require software installation?
No. Users access their virtual authenticator through a browser. No authenticator application, desktop agent, or browser extension needs to be installed simply to retrieve the TOTP.
Does Credenti Extend work with Okta?
Yes. Credenti Extend is designed to work with TOTP authentication supported by Okta. Okta continues to validate the TOTP and enforce the organization's authentication policies.
Does Credenti Extend work with Microsoft Entra ID?
Yes. Credenti Extend works with OATH TOTP authentication supported by Microsoft Entra ID. Entra remains responsible for validating the authentication code and enforcing authentication policy.
Is Credenti Extend replacing Okta Verify or Microsoft Authenticator?
Credenti Extend provides an alternative way to make TOTP available for populations where requiring a physical phone or authenticator application creates operational challenges. It does not replace the identity provider itself.
Does Credenti Extend replace SMS MFA?
Credenti Extend can provide a phone-independent alternative for appropriate authentication workflows currently dependent on SMS or voice OTP delivery. The user's TOTP is made available through their virtual authenticator instead of being delivered through a telecommunications provider.
Does Credenti Extend require a phone number?
No phone number is required to deliver the TOTP because the user retrieves it from the virtual authenticator rather than through SMS or voice.
How does a user enroll without a phone?
During first-time enrollment, Credenti Extend sends a six-digit verification code to the user's registered secondary email. After successful verification, the user can establish a personal PIN when configured and complete activation of the virtual authenticator.
Why does Credenti Extend require a secondary email?
The secondary email provides an independent channel for verifying the user during first-time enrollment. It should not depend on the same Okta or Microsoft Entra environment being protected.
Is secondary email used every time the user authenticates?
No. Secondary email is used for identity verification during enrollment rather than to deliver every TOTP authentication code.
How does the PIN work?
When configured, the PIN protects access to the virtual authenticator. The experience is similar to unlocking a physical phone with a PIN before accessing an authenticator application.
Who is Credenti Extend designed for?
Credenti Extend is designed for organizations that need to extend TOTP authentication to users where requiring phones, authenticator applications, security keys, or endpoint software creates operational challenges. It is particularly suited for brokers, financial agents, partners, contractors, global help desk personnel, BPO and contact center workers, temporary workers, and other distributed or extended workforce populations.
Can Credenti Extend be used in BYOD environments?
Yes. BYOD and independently managed endpoints are important Credenti Extend use cases because users can access their virtual authenticator without requiring the organization to install authentication software on the endpoint.
See Credenti Extend in Action.
Keep Okta or Microsoft Entra. Extend TOTP. Remove the device dependency — give brokers, partners, contractors, call centers and help desks enterprise MFA without a phone, an app to install, or hardware to ship.
