Case Study: U.S. City Municipality

Overview

A U.S. city municipality recognized the growing risk of cyber threats and the need to modernize its security controls — particularly around workstation access for government staff. The city turned to Credenti to implement a passwordless, badge-based authentication experience using Credenti Tap as the primary login method and Credenti Auth for fallback MFA when needed. This approach enabled consistent access across departments, even in offline scenarios, while helping the city qualify for a cyber insurance discount.

The Challenge

• No Personal Phones Allowed: MFA was limited to city-issued devices due to HR and compliance requirements.
• Confusion Around SMS MFA: Users mistook legitimate messages for scams, reducing trust in SMS authentication.
• Inconsistent Access Methods: Departments relied on different systems like key fobs, making access control fragmented and hard to manage.
• Offline Laptop Logins: Devices not immediately connected to Wi-Fi required insecure admin overrides to log in.
• Cyber Insurance Requirements: Full administrative MFA enforcement was required to secure discounts on policy premiums.

The Solution

• Credenti Tap (formerly TecTANGO): RFID-enabled badges used for desktop and building access—no phone required.
• Credenti Auth Fallback (formerly TecMFA): Okta TOTP and push notifications provided backup MFA on city-issued devices.
• Offline Access Enabled: Devices could authenticate without needing an internet connection at boot.
• Enforced Admin MFA: MFA was applied to all privileged accounts to meet policy and audit requirements.
• Phased Rollout Across Departments: Deployed from City Hall to utilities and public works in a controlled rollout.

The Results

• Security Uplift: Consistent MFA across departments enhanced both physical and digital protection.
• Frictionless Login Experience: Employees appreciated the simplicity of tap-to-login with optional fallback methods.
• Cyber Insurance Discount: The city achieved a 10% premium reduction through full MFA enforcement.
• Reduced Support Overhead: Confusion around SMS MFA was eliminated, reducing helpdesk tickets.
• No More Key Fob Logistics: RFID eliminated key fob distribution and replacement headaches.‍

‍“Credenti’s RFID and desktop MFA solution gave us what we needed — security without operational friction. It worked for every department, even offline.”

— Director of IT Security, U.S. City Municipality

‍