.. Introduction.rst ============ Introduction ============ **FIDO Pre-reg**, part of *YubiKey as a Service - Enrollment*, provides a fully managed service that delivers pre-enrolled YubiKeys directly to end users, enabling secure onboarding from the start. .. image:: /graphics/yaas-overview.png :width: 600 With FIDO Pre-reg the IT administrator (IT admin) for an organization can use the YubiEnterprise API together with the WebAuthn API of an Identity Provider (IdP) and automated workflows to order pre-enrolled YubiKeys for end users. The YubiKeys are pre-enrolled and shipped directly to the specific end user who received a randomly generated PIN separately. The following sections describe how to integrate FIDO Pre-reg with PingOne PingID and PingOne AIC (Advanced Identity Cloud). The instructions are intended for solution architects and IT admins setting up shipments of pre-enrolled YubiKeys for their organization’s end users in an Microsoft Azure-based environment with PingOne PingID or PingOne AIC, and Microsoft Entra ID. The instructions assume you have IT administration skills and knowledge of the the `YubiEnterprise Delivery API `_, Microsoft Azure, Entra ID, and PingOne PingID or PingOne AIC. Listed tasks include steps performed both in the Yubico Customer Portal and Microsoft Azure, Entra ID, PingOne PingID and PingOne AIC. .. important:: Before you start implementing FIDO Pre-reg, ensure you have the Customization IDs and Product IDs for the YubiKey models you will be shipping to end users. These IDs are provided by Yubico during onboarding of your organization. For more information, see :ref:`prerequisites`.