Integrated MFA & PAM

In Excalibur, every action performed within the PAM system is cryptographically signed using key material tied to the MFA. Excalibur utilizes secure enclaves in mobile devices, similar to the security used in mobile payments, providing robust security guarantees.

This integration ensures that each user action is securely verified and recorded, with the user's identity cryptographically linked to all authentication factors. By tightly integrating MFA with PAM, Excalibur prevents the security gaps that could arise from using third-party MFA solutions, which lack standardized cryptographic signing capabilities.

Unlike OTP hardware tokens, Excalibur's integrated MFA binds user identity, device, and every privileged action through strong cryptographic signatures.