Passkey promotion step

Suggest Edits

The passkey promotion step encourages customers to register a passkey after MFA enrollment. Passkeys offer a phishing-resistant, passwordless login experience using device-native credentials (such as Touch ID, Face ID, or Windows Hello).

Flowchart segment highlighting the optional Passkey promotion step within the registration journey. Positioned after MFA enrollment and before the Account activation type decision point, this step offers users the opportunity to register a passkey for passwordless sign-in. The flow splits afterward based on the activation method: in-band (activation via OTP) or out-of-band (activation via magic link). Passkey promotion is marked with a dashed outline, indicating its optional nature. — The Passkey promotion step within the registration journey

This step typically follows the MFA registration step and is part of the broader effort to drive stronger authentication options.

The customer is presented with a screen explaining the benefits of registering a passkey.
If they choose to continue, they are guided through the process of creating and saving a passkey on their device.
They can skip this step if they prefer not to register a passkey at that time.

Screenshot of the passkey promotion screen in the registration journey. The screen encourages customers to create a passkey instead of using passwords, highlighting the benefits of not needing to remember complex passwords. It includes brief educational points explaining what passkeys are, why they’re useful, and where they are stored. At the bottom, there are options to either continue with passkey setup or skip it for now. — Passkey promotion step

Settings that affect this step

Whether the passkey promotion step appears in the registration journey depends on several configuration options:

This step is available if passkeys are enabled in the Adaptive Access policy applied to the application.
Passkey promotion during registration is controlled by the Show passkey promotion during registration setting in the Self-service policy.

What happens next

Once the customer completes (or skips) the passkey registration, they continue to the Account activation step if account activation is enabled in the Self-service policy. Otherwise, the journey continues to the next relevant step.

Updated 18 days ago