HYPR

The HYPR connector integrates the Maverics Orchestrator with HYPR passwordless authentication — enabling phishing-resistant, device-based authentication for your applications.

Console terminology: In the Maverics Console, this section is called Identity Fabric. The YAML configuration uses the connectors key to define identity provider integrations.

Overview

The HYPR connector enables passwordless authentication using the HYPR platform. It supports device-based authentication and QR code flows — allowing users to authenticate without passwords using their registered mobile device. The Orchestrator uses OIDC internally, but the Console exposes HYPR-specific configuration fields for the HYPR domain, application, and access token.

Use Cases

Passwordless SSO across legacy and modern apps — Replace passwords with HYPR device-based authentication and extend it to applications that lack native HYPR support, unifying passwordless SSO through the Orchestrator
Phishing-resistant MFA for IdP consolidation — Add strong, phishing-resistant multi-factor authentication as part of an IdP rationalization strategy, strengthening security posture while reducing reliance on legacy MFA solutions
QR code authentication for shared workstations — Enable users to scan a QR code with the HYPR mobile app for fast, secure authentication on shared or kiosk devices where passwords are impractical
Zero-trust authentication upgrade — Layer HYPR passwordless authentication into existing identity infrastructure through the Orchestrator, upgrading security without replacing or reconfiguring individual applications

Configuration

Console UI
Configuration

To create a HYPR connector in the Maverics Console:

Navigate to Identity Fabric in the Console sidebar.
Click Create and select HYPR.
Enter a Name — this is the friendly name that identifies your provider.
Enter the HYPR Domain — the base domain of your HYPR account (e.g., your-org.hypr.com).
Enter the HYPR App ID — the name of the application as defined in the HYPR Control Center.
Enter the Access Token — an access token configured in the HYPR Control Center. Use the show/hide toggle to verify the value.
Optionally enable QR Authentication to display a QR code that users can scan with the HYPR mobile app. This toggle is off by default.
Optionally set a Status Check URL to monitor the HYPR service status.
Optionally set a Login URL to define a custom endpoint for posting user credentials.
Optionally upload a Custom Login HTML file to customize the login page displayed to users.
Optionally upload a Custom Interstitial HTML file to customize the interstitial page displayed during authentication.
Optionally upload a Custom Error HTML file to customize the error page displayed when authentication fails.
Click Save.

maverics.yaml

connectors:
  - name: hypr
    type: hypr
    hyprDomain: "https://{{ env.HYPR_DOMAIN }}"
    hyprAppID: "{{ env.HYPR_APP_ID }}"
    accessToken: <vault.hypr_access_token>

Configuration Reference

Key	Type	Required	Description
`name`	string	Yes	Unique connector identifier referenced in app policies
`type`	string	Yes	Must be `hypr`
`hyprDomain`	string	Yes	The base domain of the HYPR account (e.g., `https://your-org.hypr.com`)
`hyprAppID`	string	Yes	The application name as defined in the HYPR Control Center
`accessToken`	string	Yes	Access token from the HYPR Control Center (use secret reference syntax)
`statusCheckURL`	string	No	URL for polling authentication status (default: `/.hypr-status-check`)
`loginURL`	string	No	Custom endpoint for the HYPR login form (default: `/.hypr-login`)
`mfaOnly`	boolean	No	Use HYPR for MFA only (no standalone login handler)
`qrAuthentication.enabled`	boolean	No	Enable QR code authentication flow
`customLoginHTML`	string	No	Path to a custom login page HTML template
`customInterstitialHTML`	string	No	Path to a custom interstitial page HTML template
`customErrorHTML`	string	No	Path to a custom error page HTML template
`tls`	string	No	Named TLS profile for communication with the HYPR domain

For the complete field reference, see Identity Fabric.

Troubleshooting

Verify the HYPR domain is accessible from the Orchestrator host — ensure the domain is correct and reachable
Ensure the App ID matches exactly what is configured in the HYPR Control Center — mismatched app IDs cause authentication failures
Check that the access token is valid — expired or revoked tokens will prevent the connector from communicating with HYPR
QR code not displaying — confirm that the QR Authentication toggle is enabled in the Console or that the equivalent setting is configured in YAML

Identity Fabric

Overview of all identity providers

Generic OIDC

Generic OpenID Connect connector

Okta

OIDC connector for Okta

Microsoft Entra ID

OIDC connector for Microsoft Entra ID

Console Administration

Orchestration

Overview

Use Cases

Configuration

Configuration Reference

Troubleshooting

Identity Fabric

Generic OIDC

Okta

Microsoft Entra ID

Console Administration

Orchestration

​Overview

​Use Cases

​Configuration

​Configuration Reference

​Troubleshooting

​Related Pages

Identity Fabric

Generic OIDC

Okta

Microsoft Entra ID

Overview

Use Cases

Configuration

Configuration Reference

Troubleshooting

Related Pages