Lessons from Kenvue's Passwordless Rollout Across 40K Users
summary
Kenvue migrates ~45,000 users off passwords by unifying three IdPs (PingFederate, Entra ID, Ping One) and supporting Windows Hello for Business, a mobile authenticator, and a desktop app for phoneless users, rolled out as canaries then regionally. Authentication rate hits about 87% passwordless with MFA usage up ~4,000 unique users/week; average login saves ~20 seconds, totaling 52,000 hours/year saved. Session lifetime moves from 90 days to 7 days now, aiming for 8-hour seamless SSO next. 45,000 users
AI-written summary · about
chapters (15)
- 0:00Introduction and setup
- 1:28Passwordless rollout at Kenvue
- 3:37Motivation for passwordless adoption
- 6:06Passwordless authentication demo
- 8:04Current identity provider setup
- 10:10Success metrics and goals
- 11:59Passwordless adoption results
- 14:12Time saved per authentication
- 15:53MFA adoption improvements
- 17:00Session timeout changes
- 18:25Rollout process and testing
- 20:31Lessons learned and communication
- 21:55Narrative and stakeholder alignment
- 22:38Next steps and future plans
- 23:20Q&A session
related talks
49mGoing Passwordless for Employees: Secure Modern Authentication at Work
30mWhere we’re going… we won’t need passwords
43mPasswordless: a story of risk, protection and excellent UX
34mPasswordless: a story of risk, protection & excellent UX
25mConsumer Passwordless at Scale
31mRolling Out Passwordless
30mGoing Beyond Passwords: The Future of User Authentication
18mShifting Authentication at Scale