In this article, we will show you how to switch on passkeys for your Kallidus products. Passkeys offer you a whole new layer of security for your organisation whilst offering ease of use and reliability for your end users. A few things to know:
- Users will need a device capable of supporting biometrics (fingerprint, Face ID) or
- Once set up globally, use of passkeys is optional for Users to set up if they wish to use it
- Once biometrics are set up Users can still login via password if they would prefer
This article includes:
- How Kallidus manages biometric data
- How to switch on biometric passkeys
- How Users can set up biometric passkeys
- What to do if a User is unable to access their device with Biometrics
- Advice on using passkeys across shared devices
How Kallidus manages biometric data
Biometric passkeys offer a robust solution for secure authentication, leveraging unique biological traits like fingerprints or facial recognition.
To maintain data integrity and security, biometric data is encrypted and stored locally on devices in secure formats, ensuring it cannot be intercepted or misused. Neither Kallidus nor your admin/tech teams can gain access to the biometric data itself.
How to switch on passkeys
Switching passkeys on is super easy.
-
Browse to Manage users:
- Go to Settings
- Scroll down to the Login options section. Choose to toggle the Allow login using passkey:
How Users can set up passkeys
Once switched on, there are 3 ways that passkeys can be set up for an individual User. This depends on whether the individual is working on a device that supports biometrics or not. In this section we'll cover:
- How a User can set up biometrics on a device that directly supports biometrics
- How a User can set up biometrics using a second device that directly supports biometrics
- How an administrator can set up biometrics for an individual
How a User can set up passkeys on a device that directly supports biometrics
Users logging in on devices which support biometrics will be invited to setup biometrics when they log into Kallidus. They can choose to skip this step should they wish to:
When Create a passkey is selected, the User will be invited to use their biometric to set up a passkey (in this example, it is a fingerprint, but it could be a face ID):
Once the passkey has been created, the User can use this to log in to Kallidus products from this point forward.
How a user can set up passkeys using a second device that directly supports biometrics
If your User is logging into a machine where biometrics are not supported, they can still use biometrics from another device. They can, of course, choose to skip this step should they wish to.
The User is offered the opportunity to set up a passkey:
If they choose to Create a passkey then they are offered a choice about where to create and save the passkey. Once they choose, they then need to scan the displayed QR code to link their account with that biometric:
Once scanned, they are invited to set up a passkey on that device. Once saved, they will be able to use the device as a biometric for logging into their non biometric device. A message is shown when the biometric is successfully saved:
How to setup biometrics when adding a user into the system manually
This option can be useful when adding people to system manually via Manage users.
-
Browse to Manage Users:
- Select + Add user.
- Complete the First name, Last name, email address and import key (if required).
- Select Continue.
- Select Create a passkey.
- Select Continue.
How an administrator can set up biometrics for an individual
This option may be useful if a User is struggling to set up Biometrics using the options described above.
As an administrator, you can set up a person with a biometric passkeys if you are in the same location as the User. The person you are setting up passkeys for needs to have a device capable of supporting biometrics.
-
Browse to Manage Users:
- Search for the User
- Select Actions:
- Select Edit
- Scroll down to the Passkeys section:
- Select Add passkey
- Select Continue:
- Select Continue:
- Select Continue:
- If your machine supports biometrics, you will see a prompt. Select Use another device:
- Select where the biometric passkey is going to be saved:
- A QR code will be displayed. Ask the person creating the biometric to scan the code and then create their biometric as instructed
- Once they have added their biometric, a confirmation screen will be displayed:
What to do if a User is unable to access their device with the passkey on it
Passkeys, once switched on, is low effort to administer. If a user has lost their device with the biometric on, then you can delete this from the system. They will then be asked to create a new passkey the next time they log in.
To delete a record of a biometric against an individual:
-
Browse to Manage Users:
- Search for the User
- Select Actions:
- Select Edit
- Scroll down to the Passkeys section:
- Select to Remove the passkey. This will blank it out and invite the user to create a new one the next time they log in.
Using passkeys on shared devices
If your IT setup allows it, passkeys can be used effectively on shared devices. However, the approach depends on how user profiles are managed:
Using separate profiles for different users
- If each user has their own profile on the shared device, passkeys remain separated automatically,.
- Only the passkeys linked to a specific users will be available in their profile, ensuring a simple and secure authentication experience.
Using a single profile for multiple users
- If the shared device has only one profile or network login, managing passkeys becomes more complex.
- Users can store their passkeys on personal devices (such as smartphones) and use them when signing in on the shared device.
- This requires selecting the correct passkey during authentication, which may lead to confusion if users pick the wrong one.
Security considerations
- Even if the wrong passkey is selected, users will not be granted access to the wrong account, just like with usernames and passwords.
- However, mis selecting passkeys could cause confusion, so training and clear instructions for users may help minimize issues.
We recommend speaking to your IT team before switching on passkeys within your organisation.
Get deeper learning in The Academy
The Academy is your learning hub for Kallidus products, including live events, eLearning videos, and more. If you're new to The Academy or know someone who is missing out on free learning, contact your Customer Experience Manager or the Support Team to sign up today.
Discover the latest insights, tips and industry news on the Kallidus blog.