Building Blocks of Security: Using passkeys to protect user access
summary
Attentive describes replacing passwords with passkeys via Okta policies, enforcing device-bound authentication at the application layer and rolling out three use cases: workforce access (full enrollment in 4 weeks), a customer-account reauthentication flow (custom passkey backend, users enroll in 1 week, reduces exposed accounts by 98%), and just-in-time AWS role escalation (Okta step‑up, 12‑hour sessions, 96% reduction in long-lived privileges). Implementations mostly work; custom backend and UX edge cases with synced credential managers require extra support.
AI-written summary · about
chapters (14)
- 0:00Introduction to passkeys
- 1:08Why passkeys at Attentive
- 2:32First passkey implementation with Okta
- 5:20Rollout challenges and adoption
- 7:10Results of first rollout
- 10:25Securing customer account access
- 13:39Reauthentication flow demo
- 15:29Lessons from customer access rollout
- 16:53Passkeys for critical infrastructure
- 17:14Replacing manager approvals
- 19:01Implementation and results
- 20:26Impact on engineering workflow
- 22:14Future plans for passkeys
- 23:50Q&A session
related talks
01h 06mTutorial: Passkeys to the People: Building a Modern MFA Application with Open Source...
30mAuthentication for humans, why passkeys finally make sense.
45mPast Time for Passkeys
42mIntroducing Passkeys for Multiple Use Cases and UX Challenges
38mPasswordless App with Passkey
16mThe end of forgotten passwords - Biometric Authentication
24mPasskeys and digital identity best practices
51mA Passwordless Future! Passkeys for Java Developers