Passkeys let people sign in to Kadence with a fingerprint, face scan or device unlock instead of typing a password. This guide covers how to turn passkey sign-in on for your organization, and how it works alongside SSO.
Before you start
Passkey sign-in is off by default for every organization. You need to be a Global Admin to turn it on.
The Sign in with Passkey button appears on the Kadence login screen for every organization, including yours, even before you turn the feature on.
Passkey permissions
| Global Admin | Employee |
Turn passkey sign-in on or off | Yes | No |
Create or remove a passkey | Once enabled | Once enabled |
See the Sign in with Passkey button on the login screen | Yes | Yes |
Turn on passkey sign-in
A passkey means fewer passwords for your team to remember, and one less credential for your helpdesk to reset.
Go to Settings → Company → Passkeys.
Turn passkey sign-in on.
Once it's on, anyone in your organization can set up their own passkey - share the Sign in to Kadence with a passkey guide with your team to get started.
Passkeys and single sign-on (SSO)
If your organization signs in through an identity provider, it's worth knowing how passkeys fit alongside it before you switch the feature on.
A passkey is a separate way to sign in, not an extra check on top of SSO. Kadence verifies the passkey itself, so once someone sets one up, they can sign in without going through your identity provider.
Leaving passkey sign-in off (the default) only stops people from signing in with a passkey - it doesn't change password or SSO sign-in, which keep working exactly as they do today.
If you leave passkey sign-in off
The Sign in with Passkey button still appears even when your organization hasn't turned the feature on. Selecting it just tells the person passkey sign-in isn't available yet, and they carry on signing in with their password or SSO as usual.
FAQs
Who can turn passkey sign-in on for my organization?
Who can turn passkey sign-in on for my organization?
A Global Admin, from Settings → Company → Passkeys.
If we require SSO, does turning on passkey sign-in create a way around it?
If we require SSO, does turning on passkey sign-in create a way around it?
Yes, in the sense that anyone who sets up a passkey can sign in without going through your identity provider - Kadence verifies a passkey directly, not through SSO. If you need every sign-in to go through your identity provider, leave passkey sign-in off.
Why do people see a "Sign in with Passkey" button if we haven't turned it on?
Why do people see a "Sign in with Passkey" button if we haven't turned it on?
The login screen is the same for every Kadence organization, so the button always appears. Selecting it before you enable the feature just tells them it isn't available yet, and they carry on signing in with their password or SSO as usual.
Need Help?
For support, reach out to:
📩 [email protected]
For more helpful articles see:
📚 Kadence Help Center