.. _passkeys-auth:

Passkeys Authentication
=======================

Passkeys (FIDO2 WebAuthn) are a standards-based, passwordless authentication method that allows secure authentication without manually entering a password.

Passkeys can be used with platform authenticators or external authenticators and typically rely on device-local biometric or PIN verification combined with cryptographic keys stored on the authenticator.

This document describes how Genian ZTNA supports Passkeys for various authentication flows (admin, user (CWP/Agent), ZTNA-Client) and how to configure them.

Supported flows and integration
-------------------------------
- Admin console authentication
- User CWP authentication
- Agent authentication
- ZTNA-Client authentication

Configuration overview
----------------------
The Passkeys feature can be configured per authentication target (admin, user (CWP/Agent), ZTNA-Client). Detailed pages describe settings and registration flows.

.. toctree::
   :maxdepth: 1

   ./passkeys-admin
   ./passkeys-cwp
   ./passkeys-agent
   ./passkeys-ztna-client