Authentication when Passkey is Enabled for Windows Login

​

Introduction

This document provides an overview of how to login to Windows device when passkey is enabled, and how the authentication is processed on the Windows device.

​

Prerequisite

• You must have a Windows Pro Machine.
• OpenVPN must be enabled for authenticating with passkey.
• Domain account must be created for the User.
• Passkey must be Created for the User. For more, refer: How to Create Passkey for a User in Windows Supervisor App
• Enable Passkey toggle must be turned on in the Tenant Admin portal. For more, refer: Oloid Platform - How to enable Passkey in Tenant Admin Portal for Windows Login

​

Steps to sign in to Windows device when passkey is enabled

1. On the Windows lock screen, do the following:
   1. Click Sign-in options. The Windows login app is displayed.
   2. Select Windows login app.
   3. Select Login with OLOID. The Windows login app opens and the Scan Badge page is displayed.
2. Tap the Badge on the Badge Reader to scan it. On Badge authentication, the Enter PIN pop-up box is displayed.
3. Enter the PIN then click Submit.

On PIN authentication, you are signed in to the Windows device.

​

Passkey Authentication Flow

When a user initiates login on the Oloid authentication page, the system is prompted to authenticate using a previously registered passkey. The authentication request is handled by the user’s device, where the user verifies their identity Oloid Credentials, this verification happens locally on the device. Once the user is successfully verified, the device generates a secure authentication response and sends it to the server. The server validates this response using the registered credentials and, upon successful verification, grants the user access to the application. This ensures that sensitive credential handling is confined to the device and backend systems, with no passwords being transmitted or exposed. As a result, passkey authentication provides a secure and seamless login experience while minimizing the risk of phishing and credential theft. If authentication fails, the system proceeds with fallback authentication methods if they are configured.