Supported Ecosystem

Axiad Conductor SaaS

Axiad's cloud-delivered Credential Management System (CMS) — a SaaS platform for unified credential lifecycle management, MFA orchestration, and certificate-based authentication.

Axiad Conductor for Airgap

The on-premises edition of the Conductor platform, designed for air-gapped, classified, or regulated environments where a cloud-hosted CMS is not an option.

Both

Supported by Axiad Conductor SaaS and Conductor for Airgap

Airgap only

Supported only by Conductor for Airgap (on-prem)

Conductor SaaS only

Supported only by Axiad Conductor SaaS (cloud)

Axiad Conductor SaaS and Conductor for Airgap use SCIM 2.0 for provisioning and SAML / OIDC for authentication with external Identity Providers. Standard configurations (included in setup) are Entra ID, Okta, and Ping Identity. Non-standard configurations (such as SailPoint, Active Directory via LDAP, or multiple AD forests) are supported via enablement packages.

Microsoft

Entra ID (Azure AD)

SCIM 2.0 + SAML / OIDC

Both

Microsoft

Entra ID GCC High

SCIM 2.0 + SAML / OIDC

Both

Microsoft

ADFS

SAML / OIDC federation, all actively supported Windows Server versions

Both

Ping Identity

PingFederate

SCIM 1.1 & 2.0; versions 11.0.1.1 → 12.2.0

Both

Microsoft

Active Directory (LDAP)

All actively supported Windows Server versions

Both

Okta

Okta (incl. AD Agent)

All actively supported Okta agent versions

Both

SailPoint

SailPoint Identity Security Cloud

SCIM 2.0; non-standard configuration

Both

Yubico

YubiKey 5 Series & YubiKey 5 FIPS Series (all models)

Firmware 5.3.x, 5.7.1, 5.7.4

Both

IDEMIA

ID-One PIV

Versions 8.0, 8.1, 8.2

Both

Thales

SafeNet IDPrime MD 930

Current

Both

Thales

SafeNet eToken Fusion NFC PIV (NDA GP keys)

Supported on UCMS 4.22+

Both

Feitian

BioPass FIDO2

K26+, K27+, K45+ FIPS

Both

Microsoft

Virtual Smart Card

Same as Windows

Both

Multiple

HOTP / TOTP Hardware Tokens

Any HOTP/TOTP-compliant device with PSKC import (e.g., HID OTP tokens)

Both

Thales

SafeNet Luna Network HSM

Commercial: K7 series (A700/750/790, S700/750/790); Government: T-2000 / T-5000; Backup: B700/750/790, T-30B

Airgap only

Utimaco

CryptoServer

Firmware 4.50.0.2 minimum (current: 6.3 / 6.4)

Airgap only

Microsoft

Certification Authority (MSCA / ADCS)

All actively supported Windows Server versions

Both

IdenTrust

Public PKI (TrustID, FBCA)

Current cloud version

Conductor SaaS only

WidePoint

Federal SSP PKI (EJBCA-based)

EJBCA Credential Provider, UCMS 4.27+

Conductor SaaS only

Mobile PKI

iOS Secure Enclave & Android Secure Element

PIV Derived Credential issuance — UCMS 4.27+

Conductor SaaS only

PrimeKey / Keyfactor

EJBCA

Community & Enterprise editions; version 9.1

Airgap only

AppViewX

Certificate Lifecycle Automation

Working integration (current)

Conductor SaaS only

Venafi

Machine Identity Management

Working integration (current)

Conductor SaaS only

Microsoft

Intune

SCEP certificate distribution for NHI; Mobile PKI device eligibility (UCMS 4.27+)

Conductor SaaS only

Jamf

Jamf Pro

SCEP integration for macOS; Jamf Connect compatibility documented

Conductor SaaS only

Axiad Conductor SaaS and Conductor for Airgap client agents and end-user experiences are supported on the operating system versions listed below.

Microsoft

Windows 11 Enterprise / Pro

All actively supported (22H2, 23H2, 24H2)

Both

Microsoft

Windows 10 Enterprise / Pro

22H2

Both

Apple

macOS

Current: Tahoe (26); Previous: Sequoia (15); Legacy: Sonoma (14)

Both

Apple

iOS

iOS 18 and later

Both

Google

Android

Android 14 and later

Both

Microsoft

Windows Server

All actively supported (2019, 2022, 2025)

Airgap only

Google

Chrome

Stable channel

Both

Microsoft

Edge

Stable channel

Both

Customers deploying Conductor for Airgap on-premises operate the application stack themselves. The following components and versions are supported. (Axiad Conductor SaaS customers don’t manage this stack — Axiad operates it as part of the cloud service.)

Apache

Tomcat

10.1.45 (UCMS 4.25 – 4.28)

Both

Oracle

Java (Oracle JDK)

Version 17 LTS

Airgap only

Red Hat

OpenJDK

Version 17 LTS

Airgap only

Important: UCMS 4.17 and 4.19 used Tomcat 9 with Java/OpenJDK 11. From UCMS 4.20 onward, Tomcat 10 with OpenJDK 17 is required.

Open Source

PostgreSQL

Versions 12 → 17

Both

Microsoft

SQL Server

2019, 2022

Airgap only

Oracle

Oracle Database

19c

Airgap only

Oracle

MySQL

5.x (5.7 minimum with strict SQL), 8.x

Airgap only

Open Source

PostgreSQL JDBC

postgresql-42.7.5.jar (UCMS 4.20+)

Both

Microsoft

MSSQL JDBC

mssql-jdbc-12.8.1.jre11.jar (UCMS 4.20+)

Airgap only

Oracle

Oracle JDBC

ojdbc10.jar 19.25.0.0 (UCMS 4.20+)

Airgap only

Oracle

MySQL Connector/J

mysql-connector-j-9.2.0.jar (UCMS 4.20+)

Airgap only

The following protocols and authentication standards are supported across both Axiad Conductor SaaS and Axiad Conductor for Airgap.

FIDO2 / WebAuthn

Passkey enrollment and management with Enterprise Attestation support

Both

CBA / PKI

Certificate-based authentication via smart cards, YubiKeys, and virtual smart cards

Both

SAML 2.0

SSO and federation with IdPs (Entra ID, Okta, Ping, etc.)

Both

OAuth 2.0 / OIDC

SSO and federation

Both

SCIM 2.0

User provisioning and deprovisioning (Entra ID, Okta, Ping, SailPoint)

Both

SCEP

Certificate enrollment for MDM (Intune, Jamf)

Both

Syslog

SIEM integration (Splunk, IBM QRadar, any syslog receiver)

Both

RADIUS

Authentication for VPN, Wi-Fi, and network access (legacy / limited)

Both

Windows Hello for Business

Platform credential management (legacy / limited)

Both

OTP (HOTP / TOTP)

Legacy authentication — sunset planned

Both

Push Notification

Via the Axiad ID mobile app — sunset planned

Both