What are the main integration options for passkeys?

Passkeys can be integrated into enterprise authentication systems using four primary methods, each with distinct benefits and challenges:

1. Passkey Button Approach: Adds a "Continue with Passkey" button to the login screen.

   • Benefits: Simple implementation, maintains existing login flow.
   • Challenges: May result in lower passkey usage as it requires user action.
   • Example: Australia's myGov portal.

2. Identifier-First Approach: Users enter their email/username first. The system checks for a registered passkey and prompts for biometric authentication if available.

   • Benefits: Seamless UX, higher adoption rates, reduced SMS OTP costs.
   • Challenges: Potential for account enumeration risks, requiring mitigation strategies like bot management.
   • Example: Google's passkey implementation

3. Password + Passkey Method: Combines passkeys as a second authentication factor after password entry.

   • Benefits: Enhanced security and gradual user transition.
   • Challenges: Additional steps may increase friction.

4. Cross-Device Authentication (CDA) First Supports passkey usage via mobile devices or security keys for cross-device authentication.

   • Benefits: Enables passkey usage on non-supportive devices.
   • Challenges: Increased technical complexity and user education requirements.

Choose the method that best aligns with your enterprise’s security and user experience objectives.