Converged Physical & Logical Access

One card. Every door and login.

Every LEAF FIDO card ships contact and contactless: one smart card that unifies FIDO2 phishing-resistant login with MIFARE DESFire EV3 door access. Legacy prox and magstripe formats are supported too, so it fits your transition plan.

Talk to Our Team See How It Works

LEAF FIDO

FIDO2 + DESFire EV3

Unified Security

Why carry two badges?

Separate badges for doors and separate tokens for desktops create friction for users and complexity for IT.

Conventional Split Method

Double the credentials. Double the friction.

Managing separate building badges and computer desktop tokens doubles administrative inventory and creates constant daily friction for employees.

Modern Standard

Wavelynx Converged Method

One credential. Seamless access.

A single contactless smart card handles door entry and passwordless desktop login, unifying identity lifecycles and simplifying user onboarding.

Why Converge?

Two security boundaries. One credential.

LEAF FIDO eliminates the gap between physical access and IT identity, aligning door entry, system login everywhere, and credential lifecycle under a single card.

Tap Into the Building

MIFARE DESFire EV3 handles door access across lobbies, elevators, parking structures, long-range gates, and restricted zones, fully compatible with Wavelynx APEX and Ethos readers.

Tap Into Any System

Contactless FIDO2 authentication replaces passwords with a simple tap, not just at desktops, but rugged handhelds, heavy machinery, and forklifts. Works seamlessly with Windows Hello, Mac login, and major enterprise identity providers.

One Badge to Revoke

Issue one card. Revoke one card. When an employee departs, a single action disables both physical entry and logical access, eliminating orphaned credentials.

Target Environments

Who is LEAF FIDO for?

Regulated Industries

Finance, healthcare, government, and defense environments that mandate phishing-resistant multi-factor authentication (MFA) to access systems.

Operations-Focused Enterprises

Enterprises seeking to optimize operational overhead by purchasing, distributing, and tracking only a single card badge product per employee.

Zero-Trust IT Teams

IT organizations implementing zero trust network access (ZTNA) frameworks that want to expand identity-based security policies to physical boundaries.

Getting Started

From pilot to production

We'll help you scope, test, and deploy converged credentials across your physical and logical environments.

Technical Assessment

We evaluate your current physical reader infrastructure and identity provider requirements to design a converged deployment plan.

Pilot Deployment

Test LEAF FIDO credentials with a subset of users across physical readers and your identity provider, validating both tap-to-enter and tap-to-login.

Enterprise Rollout

Scale across your organization with bulk provisioning, lifecycle management, and full integration into your access control platform.

One card. Both boundaries.

Schedule a technical consultation to evaluate LEAF FIDO in your physical access and identity provider environments.

Talk to Our Team Schedule an Engineering Call

Common Questions

Frequently Asked Questions

A converged credential combines physical access (door entry) and logical access (desktop login) on a single smart card. LEAF FIDO handles both via a MIFARE DESFire EV3 chip for doors and a FIDO2 interface for passwordless computer login.

LEAF FIDO is built on open FIDO2 and WebAuthn standards, making it compatible with major enterprise identity providers. Please contact our team for specific integration details and configuration support.

LEAF FIDO supports passwordless login via standard FIDO2 protocols. How this fits into your overall login experience depends on your organization's security policies. Our team can help you map out the ideal user experience for desktop authentication.

The physical access interface uses MIFARE DESFire EV3 with LEAF Standard, making it compatible with any LEAF-compliant reader. The FIDO2 interface works with any NFC-enabled or contact smart card reader connected to a host computer.

LEAF FIDO is available as an ISO 14443A smart card with optional dual-technology (125 kHz Prox backward compatibility). Contact your Wavelynx representative for custom branding and form factor options.

Functionally, both approaches provide FIDO2 login and door access. The difference is operational: LEAF FIDO reduces inventory to a single credential per employee, simplifies onboarding/offboarding, and eliminates the risk of employees losing one device while keeping the other.

Trusted across the access control ecosystem