Case Study: Redesigning a Native Authenticator App for Enterprise-Grade Security

In 2021, I led the redesign of a native mobile authenticator app used by enterprise customers to support secure access, multi-factor authentication, and passwordless login experiences across iOS and Android.

The app played a critical role in the authentication journey. It allowed users to approve or deny sign-in requests, register trusted devices, generate one-time passcodes, and complete number challenge verification when stronger assurance was required.

The goal was to modernize the experience without compromising security. We needed to make the app feel faster, clearer, and more trustworthy while supporting advanced authentication policies for enterprise environments.

The Challenge

The existing app was functional, but the experience had not kept pace with modern mobile expectations. The interface felt dated, key flows lacked clarity, and enterprise customers needed more control over how authentication methods were presented and enforced.

The challenge was not simply to redesign the UI. We needed to improve confidence at the exact moment a user was making a security decision.

Users needed clearer context before approving a request. Administrators needed policy-driven controls. Engineering needed a reliable experience across two very different mobile ecosystems, especially Android, where device fragmentation created additional complexity around notifications, battery behavior, and app reliability.

What success needed to look like

Success meant creating an authenticator experience that felt secure, simple, and enterprise-ready.

The app needed to support push-to-accept, number challenge, device registration, and one-time passcodes in a way that felt natural to users. It also needed to support policy-driven behavior, allowing enterprise administrators to control which authentication methods were available based on risk, user group, or journey configuration. Just as importantly, the app needed to follow native iOS and Android design patterns while still feeling like one consistent product.

My role: Product Manager

As the product manager, I led the full product lifecycle across both native platforms.

Defined authentication policies and the expected product behavior across key flows
Managed cross-functional execution with mobile engineering, design, QA, and SDK leads
Drove sprint planning, backlog refinement, testing priorities, and delivery alignment
Coordinated beta programs with enterprise testers to validate real-world usage
Partnered with documentation and support teams to ensure a smooth customer rollout

Designing Process

Designing for trust in high-stakes moments

The most important design principle was trust.

When a push notification appears on a user's phone, the user must quickly understand what is happening, why they are being asked to approve it, and whether the request is legitimate. A vague approval screen can lead to mistakes. A confusing flow can lead to support tickets. A poor experience can weaken security.

To solve this, we redesigned the authentication flow around clarity and context. Push approval screens were updated to provide stronger feedback, clearer actions, and more intentional confirmation states. Number challenge added another layer of protection by requiring users to match a code shown during login with the code presented in the app.

This shifted the experience from a simple "approve or deny" action to a more confident verification moment.

Research and discovery

I started by reviewing customer feedback, support issues, existing app behavior, and competitive authenticator experiences. I also worked with security architects and enterprise administrators to understand how the app was used in real deployments.

Several insights shaped the product direction.

Users needed more context before approving requests. Administrators wanted more control over authentication behavior. Customers were increasingly interested in passwordless and step-up authentication. Android behavior varied significantly across manufacturers, which created inconsistent notification and reliability patterns.

These insights helped us prioritize number challenge, policy support, clearer registration flows, stronger error handling, and native mobile design improvements.

Defining the product experience

The redesigned app focused on three core areas: registration, authentication, and policy-driven behavior.

Registration needed to be simple and reliable. Users could register a device through QR code scanning or a link-based flow. The experience guided users through setup and provided clearer feedback if something expired, failed, or required another attempt.

Authentication needed to be fast, but not careless. Push-to-accept remained simple for low-friction scenarios, while number challenge provided stronger assurance when higher confidence was required.

Policy support allowed administrators to determine when certain methods should be used. This created flexibility for enterprise deployments without making the end-user experience feel complicated.

Testing and beta program

I led the beta testing process with enterprise users and internal teams. The beta focused on push delivery, number challenge usability, registration success, policy behavior, and Android device reliability.

Feedback from beta users helped us refine messaging, improve error states, and adjust flows where users hesitated or misunderstood the request. It also helped uncover device-specific issues before broader release.

This testing phase was critical because authentication products do not have much room for ambiguity. The experience has to be clear, responsive, and dependable.

Outcome and impact

The redesigned app delivered a more modern and secure authentication experience across iOS and Android.

✓ Introduced number challenge and policy-driven authentication flows for stronger enterprise security
✓ Improved device registration, onboarding experience, and push approval clarity
✓ Reduced authentication errors through contextual verification cues and smarter interaction design
✓ Delivered a faster, more reliable, and more intuitive authentication experience for enterprise users