Skip to content

Commit 4e1df94

Browse files
chore: update translations and generated content (#1387)
* chore: update translations and generated content * fix: lint errors --------- Co-authored-by: charIeszhao <12833674+charIeszhao@users.noreply.github.com> Co-authored-by: Charles Zhao <charleszhao@silverhand.io>
1 parent 38f50e8 commit 4e1df94

146 files changed

Lines changed: 4734 additions & 2507 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

docs/end-user-flows/sign-up-and-sign-in/passkey-sign-in.mdx

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ Passkey sign-in lets users authenticate with a WebAuthn credential directly duri
88

99
This document explains how passkey sign-in works in Logto's built-in sign-in experience, what the different entry paths look like for end users, and how it interacts with MFA.
1010

11-
## How passkey sign-in works
11+
## How passkey sign-in works \{#how-passkey-sign-in-works}
1212

1313
To use passkey sign-in, you first need to enable it in the <CloudLink to="/sign-in-experience/sign-up-and-sign-in">sign-in experience</CloudLink> configuration. After it is enabled, Logto can offer passkey sign-in in up to three ways on the sign-in page:
1414

@@ -34,9 +34,9 @@ flowchart LR
3434
I --> J["Sign-in succeeds"]
3535
```
3636

37-
## Three passkey sign-in paths
37+
## Three passkey sign-in paths \{#three-passkey-sign-in-paths}
3838

39-
### 1. Show "Continue with passkey" button enabled
39+
### 1. Show "Continue with passkey" button enabled \{#1-show-continue-with-passkey-button-enabled}
4040

4141
When `Show "Continue with passkey" button` option is enabled, the sign-in page shows a `Continue with passkey` button at the bottom of the first screen.
4242

@@ -50,7 +50,7 @@ The user flow is:
5050

5151
This is the most direct path. It is best for users who already know they have a saved passkey and want a one-step login experience.
5252

53-
### 2. Show "Continue with passkey" button disabled
53+
### 2. Show "Continue with passkey" button disabled \{#2-show-continue-with-passkey-button-disabled}
5454

5555
When `Show "Continue with passkey" button` option is disabled, Logto switches to an identifier-first experience on the first screen. The page only asks for the user's identifier first.
5656

@@ -76,7 +76,7 @@ flowchart LR
7676
I --> G
7777
```
7878

79-
### 3. Allow prompting and autofill
79+
### 3. Allow prompting and autofill \{#3-allow-prompting-and-autofill}
8080

8181
When `Allow prompting and autofill` option is enabled, compatible browsers can show the pre-saved passkeys directly from the identifier input field.
8282

@@ -90,7 +90,7 @@ The user flow is:
9090

9191
This flow is especially useful on devices where passkeys are already synced by the platform, because users can sign in without manually moving to a second page or tapping a dedicated passkey button.
9292

93-
## Sign-up and passkey binding flow
93+
## Sign-up and passkey binding flow \{#sign-up-and-passkey-binding-flow}
9494

9595
Passkey sign-in is not only a sign-in entry point. It also affects what happens after registration, because the same WebAuthn credential can later be reused for both sign-in and MFA.
9696

@@ -120,9 +120,9 @@ flowchart LR
120120
M --> H
121121
```
122122

123-
## Relationship between passkey sign-in and MFA
123+
## Relationship between passkey sign-in and MFA \{#relationship-between-passkey-sign-in-and-mfa}
124124

125-
### Passkey sign-in automatically skips MFA verification
125+
### Passkey sign-in automatically skips MFA verification \{#passkey-sign-in-automatically-skips-mfa-verification}
126126

127127
A passkey used for passkey sign-in is backed by a WebAuthn credential, and that credential is also treated as a WebAuthn MFA factor. Because of that, passkey sign-in and WebAuthn MFA are effectively equivalent from the credential perspective.
128128

@@ -133,7 +133,7 @@ That leads to two important behaviors:
133133

134134
In other words, a successful passkey sign-in already satisfies the WebAuthn-based identity verification that would otherwise be required during MFA.
135135

136-
### Binding a passkey does not automatically force MFA for user-controlled tenants
136+
### Binding a passkey does not automatically force MFA for user-controlled tenants \{#binding-a-passkey-does-not-automatically-force-mfa-for-user-controlled-tenants}
137137

138138
For users in tenants where MFA is not mandatory, binding a passkey during sign-up or account setup does not automatically turn on MFA for the account.
139139

@@ -146,25 +146,25 @@ On that page, the user can:
146146

147147
If the user chooses to enable MFA, Logto then continues with the normal MFA setup flow and may ask the user to bind additional factors, depending on the tenant's MFA configuration. For example, if other MFA factors are enabled for the tenant, Logto can continue with binding another factor or backup codes.
148148

149-
### What happens when passkey sign-in is disabled later
149+
### What happens when passkey sign-in is disabled later \{#what-happens-when-passkey-sign-in-is-disabled-later}
150150

151151
If passkey sign-in is turned off later, the previously bound passkey is still a WebAuthn credential. That means it can continue to work as an MFA factor as long as WebAuthn MFA remains available for the tenant.
152152

153153
Disabling passkey sign-in removes the passkey as a direct sign-in entry point, but it does not invalidate the underlying WebAuthn MFA credential.
154154

155-
## Limitations and compatibility
155+
## Limitations and compatibility \{#limitations-and-compatibility}
156156

157157
- Passkey sign-in is not available for Enterprise SSO users.
158158
- Passkey sign-in depends on browser and platform WebAuthn support.
159159
- "Allow prompting and autofill" only works in browsers and environments that support passkey autofill / conditional UI.
160160
- Passkeys are origin-bound. A passkey registered for one domain cannot be used on another domain.
161161

162-
## Q&A
162+
## Q&A \{#q-a}
163163

164164
<details>
165165
<summary>
166166

167-
### Does passkey sign-in still require MFA verification?
167+
### Does passkey sign-in still require MFA verification? \{#does-passkey-sign-in-still-require-mfa-verification}
168168

169169
</summary>
170170

@@ -175,7 +175,7 @@ No. A successful passkey sign-in already satisfies the WebAuthn-based verificati
175175
<details>
176176
<summary>
177177

178-
### Can a passkey bound for passkey sign-in still be used as an MFA factor after passkey sign-in is disabled?
178+
### Can a passkey bound for passkey sign-in still be used as an MFA factor after passkey sign-in is disabled? \{#can-a-passkey-bound-for-passkey-sign-in-still-be-used-as-an-mfa-factor-after-passkey-sign-in-is-disabled}
179179

180180
</summary>
181181

@@ -186,7 +186,7 @@ Yes. Passkey sign-in and WebAuthn MFA are backed by the same underlying credenti
186186
<details>
187187
<summary>
188188

189-
### Can Enterprise SSO users use passkey sign-in?
189+
### Can Enterprise SSO users use passkey sign-in? \{#can-enterprise-sso-users-use-passkey-sign-in}
190190

191191
</summary>
192192

@@ -197,7 +197,7 @@ No. Enterprise SSO users are not eligible for passkey sign-in.
197197
<details>
198198
<summary>
199199

200-
### Does passkey sign-in still require CAPTCHA?
200+
### Does passkey sign-in still require CAPTCHA? \{#does-passkey-sign-in-still-require-captcha}
201201

202202
</summary>
203203

0 commit comments

Comments
 (0)