FIDO2 (Passkey)

FIDO2 (also known as WebAuthn) lets a user authenticate with a passkey instead of a password: a public-key credential backed by a platform authenticator (such as Face ID, Windows Hello or a fingerprint sensor) or a portable security key. Nevis supports FIDO2 passkeys through nevisFIDO and a set of nevisAdmin 4 patterns that add passkey registration and authentication to your login flow.

For an introduction to the solution and its capabilities, see the Nevis FIDO2 / WebAuthN Concept and Integration Guide.

Before you start

These pages assume a working project with nevisProxy, nevisAuth and nevisIDM. If you are starting from an empty project, work through the Web access management walkthrough first, which builds that base configuration step by step.

How this section is structured

FIDO2 (Passkey) Use Cases - configure passkey registration, authentication, usernameless login, authenticator allow-listing and cross-domain passkeys with nevisAdmin 4 patterns.

Relying party options

The use cases in this section cover FIDO2 configured through nevisAuth with nevisAdmin 4 patterns. If your relying party is a custom web application talking to nevisFIDO directly instead, see the web application integration chapters in the Concept and Integration Guide.