FIDO2 passwordless authentication enables you to identify and authenticate a user based on the FIDO2 protocol without requiring the user to enter their username and password.
To configure FIDO2 passwordless authentication, you must configure a PingFederate policy for a passwordless authentication flow. FIDO2 biometrics must then be enabled in the administrative console.
The process of registering a FIDO2 device is the same for both passwordless and secondary authentication flows. The user is directed to the relevant flow, according to your organization’s configuration. Once registered, the same FIDO2-compliant device can be used to authenticate with either flow. For more information, see Setting up Windows Hello authentication.
This feature requires PingFederate 9.3 or later. For more information, see FIDO2 biometrics authentication requirements and limitations.
In the PingFederate administrative console, create a policy for passwordless
For more information, see Configuring a PingFederate policy for passwordless authentication with FIDO biometrics.
Sign on to the PingOne for Enterprise admin console and enable FIDO2
- Go to .
Go to the Alternate Authentication Methods
section, and in the FIDO2 Biometrics row, select
the Enable check box.
- Click Save.