Passkey guide

Passwordless SSO with Passkeys

Minimum requirements for using a smartphone as a Passkey

Here are the minimum requirements for using a smartphone as a Passkey on Android and iOS:

Android

1. Operating System: Android 9.0 or later.

2. Google Play Services: Version 19.2.75 or later, which provides support for Passkeys.

3. Biometric Authentication: The device should support biometric methods (fingerprint, face recognition) or PIN code for secure authentication.

iOS

1. Operating System: iOS 15 or later.

2. Devices: iPhone or iPad with Face ID or Touch ID support.

3. iCloud Keychain: iCloud Keychain must be enabled to sync Passkeys across devices.

About the Passkey

Based on FIDO standards, passkeys are a replacement for passwords that provide faster, easier, and more secure sign-ins to websites and apps across a user’s devices. Unlike passwords, passkeys are always strong and phishing-resistant.​

Passkeys simplify account registration for apps and websites, are easy to use, work across most of a user’s devices, and even work on other devices within physical proximity.​

Passkey may include:

• Biometric authentication using Android devices;

• Touch ID / Face ID using iOS devices;

• Windows Hello;

• External security keys (like IPI Key or YubiKey).

Seting Passkey on the IPI Server

1. Sign in to your IPI server using the IPI account

To Create Passkeys for Admin account:

• To create a passkey, go to the Profile page, then the FIDO2 Authenticators section, and click Add FIDO2 Authenticator.

To Create Passkeys for User Accounts:

• Following the on-screen steps, add a FIDO2 Authenticator, choosing between a Cross-Platform key (another device, like a phone or tablet) or Platform key (current device).

Adding a Cross-Platform key:

Adding a Platform key

Note: Multiple devices can be added simultaneously.

A biometric sensor or Trusted Platform Module (TPM) module must be present.