question MFA Passkey Disabled in Community Central forum

MFA Passkey Disabled

SotaT — Thu, 02 Oct 2025 11:24:33 GMT

Is there any way to disable only passkeys in MFA?

Re: MFA Passkey Disabled

Bhuvan — Thu, 02 Oct 2025 11:31:27 GMT

@SotaT

You can follow this FAQ to enable or disable specific MFA verification method

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1709783

If this helped to answer your query, please mark it helpful & accept the solution.

Thanks,

Bhuvan

Re: MFA Passkey Disabled

SotaT — Thu, 02 Oct 2025 11:37:59 GMT

@Bhuvan

I checked the contents, but it doesn't seem to include a method for disabling only the passkey.

Re: MFA Passkey Disabled

Rafael Batistot — Thu, 02 Oct 2025 12:17:51 GMT

Hi @SotaT

Go to Multi-Factor Authentication → Properties. desable the system property glide.webauthn.enabled to turn on FIDO2-based MFA options (hardware key, biometrics, passkeys).

Re: MFA Passkey Disabled

Bhuvan — Thu, 02 Oct 2025 12:21:54 GMT

@SotaT

FAQ link I shared has reference to Product documentation that explains the properties that can be controlled to enable or disable MFA Authentication types.

https://www.servicenow.com/docs/bundle/zurich-platform-security/page/integrate/authentication/reference/mfa-properties.html

If this helped to answer your query, please mark it helpful & accept the solution.

Thanks,

Bhuvan

Re: MFA Passkey Disabled

SotaT — Fri, 03 Oct 2025 00:24:34 GMT

@Bhuvan @Rafael Batistot

I understand that setting the property to false disables passkeys. However, I believe this also disables other FIDO2 authentication methods (hardware keys, biometrics). Is it really difficult to disable only passkeys?

Re: MFA Passkey Disabled

Ambuj Tripathi — Fri, 03 Oct 2025 11:45:46 GMT

Hi @SotaT

Please navigate to Multi-factor -> Web Authentication -> Authenticator Configuration and change the Allowed Authenticator Type to Platform Authenticator.

One additional point to note is, it will disable all the types of roaming authenticators including Yubikeys as well. There is no separate specific option to disable only Passkeys.

Hope this answers your query!

Cheers!