Supported Platforms, Authenticator Versions, and Deployment Prerequisites
Last updated: September 7, 2026
This article lists the operating systems and versions supported by the Beyond Identity Authenticator, minimum system requirements, and deployment prerequisites that IT administrators should review before rollout.
Table of Contents
- Platform Authenticator 3.0.0 (Early Access)
- Quick Support Matrix (Platform Authenticator 2.x)
- Platform Details and Requirements
- Authenticator Version Support
- Deployment Prerequisites
- Related Resources
- Changelog
Platform Authenticator 3.0.0 (Early Access)
Platform Authenticator 3.0.0 — the Universal Platform Authenticator — is a separate release train from 2.x and supports a different set of minimum operating system versions. The 2.x matrix below still applies to the 2.x authenticator.
| Platform | Minimum OS | Notes |
|---|---|---|
| Windows | Windows 10 or later | x64 and ARM64. A single MSI covers per-user and system-wide installs. |
| macOS | macOS 11 (Big Sur) or later | Apple Silicon and Intel. A single .pkg covers MDM, system, and user deployments. |
| Linux | Ubuntu 22.04 or later, or any distribution with glibc 2.34 or later | x64 and ARM64. AppImage (self-updating), or native .deb and .rpm packages. |
| iOS / iPadOS | iOS 13.0 or later | iPhone and iPad supported. |
| Android | Android 9.0 or later | — |
Note: 3.0.0 is an Early Access release. Existing 2.x installations are not automatically migrated during Early Access — 3.0.0 is installed deliberately, either by the user or by an IT administrator. See the release notes for details.
Quick Support Matrix (Platform Authenticator 2.x)
| Platform | Supported OS Versions | Authenticator Version Support | Notes |
|---|---|---|---|
| Windows | Windows 10 (build 18363 and later), Windows 11 | 2.98.1 and later | 64-bit only; .NET framework embedded in installer; review deployment prerequisites. |
| macOS | macOS 14, 15, 26 | 2.98.1 and later | Review deployment prerequisites. |
| iOS / iPadOS | iOS/iPadOS 26 | 2.98.1 and later | iPhone and iPad supported. |
| Android | Android 12 (API 32), 13 (API 33), 14 (API 34) | 2.98.2 and later | — |
| Linux | Official: Debian/Ubuntu; Unofficial: RPM (RHEL/CentOS) | See Linux install guide | Refer to installer article for steps and caveats. |
End of Life Policy: Beyond Identity does not currently publish formal EOL dates for operating systems or Authenticator versions. When a platform or version is no longer supported, it will be removed from this page. Administrators should ensure devices are kept on the supported OS versions and Authenticator releases listed above.
Platform Details and Requirements
Windows
- OS version: Windows 10 (build 18363 and later), Windows 11
- Architecture: 64-bit and ARM64
- .NET Embedded in the installer
- Processor: Capable of running supported OS versions
- Other: Review deployment prerequisites and allow-list Beyond Identity processes. Windows requires TPM 1.2 for basic authentication, and TPM 2.0 for Windows Desktop Login.
macOS
- OS version: macOS 14, 15, 26
- Other: Review deployment prerequisites and allow-list Beyond Identity processes.
iOS / iPadOS
- OS version: iOS/iPadOS 26
Android
- OS version: Android 12 (API 32), 13 (API 33), 14 (API 34)
Linux
- Distributions: Official: Ubuntu (v24.04, 22.04, and 20.04). Unofficial: RPM (RHEL/CentOS)
- Notes: Refer to installer article for steps and caveats; supported versions listed on this page.
Authenticator Version Support
Minimum supported Authenticator versions:
- Windows, macOS / iOS / iPadOS: 2.98.1 and later
- Android: 2.98.2 and later
On the 3.0.0 release train, the minimum supported version is 3.0.0 and later on all platforms.
Deployment Prerequisites
Before deploying the Beyond Identity Authenticator at scale, administrators must ensure that endpoint security tools, firewalls, and device policies allow the app to run without interference.
Allow-Listed Processes (Windows and macOS)
The following processes should be allow-listed in endpoint detection and antivirus tools:
BeyondIdentity.exe(Windows)BeyondIdentityViewHelper.exe(Windows)BIService.exe(Windows)Beyond Identity.app(macOS)com.beyondidentity.*background services (macOS)
Code Signing and Team Identifiers
To validate software integrity, ensure these identifiers are recognized:
- macOS Team ID:
BZA6SZ8XVQ - Windows Publisher:
Beyond Identity, Inc.
Network Requirements
The Authenticator must be able to reach Beyond Identity’s cloud endpoints. Ensure the following domains and subdomains are allow-listed in firewalls and proxies:
*.beyondidentity.com*.byndid.com
Security Tool Compatibility
Some endpoint security agents may require exclusions for Beyond Identity processes to prevent interference with authentication flows. Consult your EDR/AV documentation for configuring exceptions.
Changelog
- Aug 29 2025: Consolidated system requirements, supported OS versions, Authenticator version support, and deployment prerequisites into one unified article.
- Oct 7 2025: Updated Authenticator version numbers for all supported platforms.
- Oct 22 2025: Updated macOS and iPad/iOS versions supported. Also, updated the macOS Team ID.
- Sep 7 2026: Added the Platform Authenticator 3.0.0 (Early Access) support matrix and labelled the existing matrix as 2.x.