I have a hypothesis on the shield thing. I am wondering if SFOR is actually asking companies that rebrand SFOR products are requested to use the same shield as the base for the logon.

This first came to mind when I saw the Microsoft Authenticator this recently. https://www.microsoft.com/en-us/account/authenticator

BlockSafe Tech: http://www.blocksafetech.com/
ACS: https://www.advancedcybersecurity.com/

NOTE: this is just a thought. I have no idea if Microsoft has any deals with SFOR.