Product Guide
...
Kubeark Identity
Stages
Password stage
1min
the password prompt is a standard way of verifying the identity of the pending user this stage also enables the choice of the authentication source for the user passwordless authentication there are two distinct methods to configure passwordless authentication one method is to directly authenticate users with their authenticator, which is only supported for webauthn devices direct authentication using authenticator passwordless authentication currently only supports webauthn devices, like security keys and biometrics for an alternate passwordless setup, see password stage, which supports other types to configure passwordless authentication, create a new flow with the delegation set to authentication dynamically skip the password stage as first stage, add an authentication validation stage, with the webauthn device class allowed after this stage you can bind any additional verification stages as final stage, bind a user login stage users can either access this flow directly via it's url, or you can modify any identification stage to add a direct link to this flow the second method involves dynamically skipping the password stage based on the user's device the documentation for this method can be found here