3 ms·
The question I have with something like this is essentially “does it support SSO”? If I’m building software for end users, at least some subset of those users w
by noodlesUK 3y ago
The question I have with something like this is essentially “does it support SSO”? If I’m building software for end users, at least some subset of those users will want SSO.
- madeofpalk 3y agoI think you can think about passkeys as an equivalent to username + password. Supporting usernames + passwords on your site does not prevent you from also supporting SSO - it's just a auth mechanism you might use to grant access to an account, on top of SSO, Passkeys, email sign-up link, etc
- toomuchtodo 3y agoCorrect! Your IdP would be where the passkeys would be supported. From there, auth is federated to other systems.
- mooreds 3y agoDisclosure, I work at an auth provider. I haven't looked deeply at what 1password offers, but I know that "does it support SSO" is a question other providers that started with passkeys only had to answer "yes" to relatively quickly. (Stytch comes to mind.) The honest truth is that auth is the front door to your application. For most applications, you want a secure door, but also one that lets in as many people as possible. So social sign-on, federation/SSO, passkeys, magic links, and even username/passwords are all methods you want to support asap.
- paxys 3y agoPasskeys are just the authentication mechanism. They have nothing to do with SSO. You can use a passkey to log in to randomsite.com, OR you can use a passkey to log in to okta.com which then forwards your session to randomsite.com.