Site Search

Okta

Octa

Passkey authentication using Auth0

Introduction

In a feature update in January 2024, Auth0 now supports passkey authentication (Synced passkey). For information on passkey authentication-related terminology and specifications, the functions required to implement passkey authentication, and the benefits of using Auth0, please see What is Passkey Authentication? An overview and the benefits of using Auth0. By using Auth0, you can easily implement passkey authentication when authenticating web services and applications.

This page explains how to implement passkey authentication using Auth0 and provides an example of how it works.

premise

The information regarding the functions and settings described on this page is current as of July 2024.

Setting Overview

  • Advance preparation
    • Prepare Auth0 linked web application
  • Checking the prerequisites required to enable passkey authentication
    • To enable passkey authentication, please check that the following prerequisites are met:
      ・Disable Custom Login Page
      ・Disable Requires Username
      ・Disable Use my own database
      ・Enable Identifier First login flow
      ・Enable Universal Login
  • Enable passkey authentication
    • Enable passkey authentication for the target Database Connection and Application

Setting Example

  • Advance preparation
    • Prepare your Auth0-integrated web application
      For instructions on how to connect to Auth0, please see How to set up Auth0 and the sample application.
  • Passkey authentication prerequisite settings
    • Disable Custom Login Page
      Custom Login Page is a function that allows you to customize the login page in HTML format. Since passkey authentication does not support Custom Login Page, it must be disabled.
      ・Location: Auth0 admin > Branding > Advanced Options > [Login] tab > Disable [Customize Login Page]
      Disable Requires Username
      If you enable [Requires Username], in addition to an email address, a username will be required to log in. If you want to enable passkey authentication, you must disable [Requires Username].
      ・Location: Auth0 admin page > Authentication > Database > (target Database Connection) > [Settings] tab > Disable [Requires Username]
      Use my own databaseDisable
      If you want to use passkey authentication with Auth0, you need to use the Auth0 user database. Therefore, you need to disable [Use my own database] unless you have enabled [Import Users to Auth0].
      ・Location: Auth0 admin page > Authentication > Database > (target database connection) > [Custom Database] tab > Disable [Use my own database]
      Enable Identifier First login flow
      If you use passkey authentication, you will not need to enter a password, so set the login flow to [Identifier First].
      ・Location: Auth0 admin page > Authentication > Authentication Profile > Set to [Identifier First]
      Universal Login Activation
      Only Universal Login supports passkey authentication, so [Universal Login] must be enabled.
      ・Location: Auth0 admin page > Branding > Advanced Options > [Settings] tab > Enable [Universal Login]
      Once all prerequisites are met, [Passkey Authentication Prerequisites] will change to READY, and you will be able to enable passkey authentication.
  • Enable passkey authentication
  • Select the Database Connection for which you want to enable passkey authentication.
    Auth0 Admin > Authentication > Database > (Target Database Connection) > Click the [Authentication Methods] tab
  • Enable passkey authentication
  • Enabling Passkey Authentication in the Application
    Auth0 admin > Application > (your connected web application) > [Connection] tab > enable [Passkey]

Operation example

Synced Passkey (MacOS PC)

  • When you first sign up
  • Perform login operation on the web application screen linked with Auth0 and transition to the login screen provided by Auth0
  • Click [Sign Up]
  • Enter your email address and click Continue
  • Click [Create a passkey]
  • Verify that the user you want to log in as is displayed, then click [Continue].
  • Facial recognition on PC
  • Login complete
  • Login and passkey authentication behavior from the second time onwards
  • Perform login operation on the web application screen linked with Auth0 and transition to the login screen provided by Auth0
  • Click Continue with Passkey.
  • Verify that the user you want to log in as is displayed, then click [Continue].
  • Facial recognition on PC
  • If authentication is successful, login is complete.

Cross-Device Authentication (Windows OS PC+iPhone)

  • When you first sign up
  • Windows OS PC: Log in on the web application screen that is linked to Auth0, and proceed to the login screen provided by Auth0.
  • Windows OS PC: Click [Sign up]
  • Windows OS PC: Enter your email address and click [Continue]
  • Windows OS PC: Click [Create a passkey]
  • Windows OS PC: Click [Use a smartphone, tablet, or security key]
  • iPhone: Read the displayed QR code
  • iPhone: Verify that the user you want to log in as is displayed and click [Continue]
  • iPhone: Face recognition
  • Windows OS PC: Login completed
  • Login and passkey authentication behavior from the second time onwards
  • Windows OS PC: Log in on the web application screen that is linked to Auth0, and proceed to the login screen provided by Auth0.
  • Windows OS PC: Enter your email address and click [Continue]
  • Windows OS PC: Click [Use a smartphone, tablet, or security key]
  • iPhone: Scan the displayed QR code with your smartphone
  • iPhone: Check that the logged-in user is displayed and click [Continue]
  • iPhone: Face recognition
  • Windows OS PC: Login completed

in conclusion

On this page, we introduced how to implement passkey authentication using Auth0 and provided an example of how it works.

By using Auth0, you can easily implement passkey authentication without having to implement the passkey authentication function from scratch. You can also try the passkey authentication function in the free Auth0 trial environment. If you are interested in Auth0's passkey authentication function, please contact us.

reference

Inquiry/Document request

In charge of Macnica Okta Co., Ltd.

Weekdays: 9:00-17:00