What are the main integration options for passkeys?

Main Passkey Integration Options#

We recently published about passkey integration options for enterprises that provides more insights about the pros, cons and adoption impact of the passkey integration. You can download the passkey integration whitepaper for free.

Passkeys can be integrated into enterprise authentication systems using four primary methods, each with distinct benefits and challenges:

1. Passkey Button Approach#

Adds a "Continue with Passkey" button to the login screen.

• Benefits: Simple implementation, maintains existing login flow.
• Challenges: May result in lower passkey usage as it requires user action.
• Example: Australia's myGov portal.

2. Identifier-First Approach#

Users enter their email/username first. The system checks for a registered passkey and prompts for biometric authentication if available.

• Benefits: Seamless UX, higher adoption rates, reduced SMS OTP costs.
• Challenges: Potential for account enumeration risks, requiring mitigation strategies like bot management.
• Example: Google's passkey implementation

3. Password + Passkey Method#

Combines passkeys as a second authentication factor after password entry.

• Benefits: Enhanced security and gradual user transition.
• Challenges: Additional steps may increase friction.

4. Cross-Device Authentication (CDA) First#

Supports passkey usage via mobile devices or security keys for cross-device authentication.

• Benefits: Enables passkey usage on non-supportive devices.
• Challenges: Increased technical complexity and user education requirements.

Choose the method that best aligns with your enterprise’s security and user experience objectives.

Read the full article#