Skip to main content

Add-on: TecZERO

Extends Okta MFA policies to desktop login. A partner add-on ZeroTek offers to MSPs month-to-month.

TecMFA is a partner add-on available through ZeroTek, a platform for MSPs. ZeroTek offers it to MSPs, MSSPs, and IT service providers on a month-to-month, per-user basis to deploy for their clients.

TecZERO enables fully passwordless Windows desktop login, authenticating users with the factors required by their Okta policy instead of a password — removing passwords as an attack surface.

Comparing desktop authentication options?

TecMFA, TecZERO, and Okta Device Access (ODA) all bring Okta-backed authentication to desktop login — but they solve the problem in different ways, at different price points. Which one fits depends on the customer's environment and your strategy. Read the full side-by-side comparison before you decide. You can also read more about how TecZERO works.


Example scenarios

  • A security-forward customer wants to eliminate passwords from desktop login entirely as part of a Zero Trust strategy.

  • A customer in a regulated industry (such as healthcare or finance) needs strong data protection and has decided to go fully passwordless at the desktop.

  • A customer keeps getting hit by credential-theft attacks tied to reused or phished passwords.

Key use cases

  • Fully passwordless Windows desktop login

  • Okta factor-sequencing authentication at the desktop

  • Eliminating passwords as an attack surface

  • Extending a passwordless Okta strategy to the endpoint

  • Online and offline passwordless authentication

  • Protection against keyloggers and plaintext-password harvesting

When to use

  • The customer wants to go fully passwordless at the desktop

  • Eliminating password-based attack surface is a security priority

  • The customer is pursuing a Zero Trust or passwordless-first strategy

  • The customer is comfortable removing passwords from the desktop login flow entirely

  • Cost-effectiveness matters and Okta FastPass to the desktop isn't required

Why it wins

  • True passwordless desktop login built on Okta's factor-sequencing framework

  • Removes passwords as a credential-theft target

  • Supports a broad set of online and offline factors (Okta Verify, FIDO2, security keys, hardware tokens, and more)

  • Cost-effective at $1 per user / month

  • Extends an existing Okta passwordless strategy to the desktop

Before you sell

  • TecZERO is passwordless-only — it requires non-password factors. Customers who still need passwords as part of the login flow should use TecMFA instead.

  • TecZERO does not extend Okta FastPass to the desktop — if continuous FastPass-to-desktop is the goal, Okta Device Access is the fit.

  • The customer should already have, or be ready to adopt, an Okta factor-sequencing / passwordless authentication policy.

  • Not the right fit for customers who require passwords, or customers who specifically need Okta FastPass at the desktop.

Pricing

ZeroTek Partners can see ZeroTek licensing, pricing, and billing for details.

Get add-on

Email [email protected] to get started with this add-on.


Still weighing TecZERO against TecMFA or Okta Device Access after reading this and the comparison guide? ZeroTek can help you confirm the right fit for a specific customer environment. Email [email protected] for assistance.

Did this answer your question?