What is Passkey in ServiceNow MFA? How to enable and configure it?

[kack l]

Hi Community,

I am currently working on ServiceNow Multi-Factor Authentication (MFA) and I see that Passkey (WebAuthn/FIDO2) is one of the supported authentication methods.

I would like to confirm:

1. What exactly is Passkey in ServiceNow?

   • Is it simply another name for WebAuthn/FIDO2, or is it different?

2. How to enable Passkey in ServiceNow?

   • Do we need to activate any specific plugins?

   • Is there any system property we must configure?

3. How to set it up for users?

   • For example, can users register their device’s biometric authentication (Windows Hello, Touch ID, Face ID, etc.) as Passkey?

   • Where do users go in the UI to register Passkeys?

4. Any environment requirements?

   • Supported browsers?

   • HTTPS required?

   • Anything else we should be aware of?

If anyone has already implemented Passkey in ServiceNow MFA, I would really appreciate your guidance or best practices.

Thanks in advance!

[Rafael Batistot]

@kack l 

Yes, the moment for PDI, I don’t know if is your case, those options are unstable as this note from 2 weeks ago

https://www.servicenow.com/community/platform-privacy-security/issue-with-mfa-in-developer-instances...