> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oloid-demo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication when Passkey is Enabled for Windows Login

> This document provides an overview of how to login to Windows device when passkey is enabled, and how the authentication is processed on the Windows device.

## Introduction

This document provides an overview of how to login to Windows device when passkey is enabled, and how the authentication is processed on the Windows device.

## Prerequisite

* You must have a Windows Pro Machine.
* OpenVPN must be enabled for authenticating with passkey.
* Domain account must be created for the User.
* Passkey must be Created for the User. For more, refer: [How to Create Passkey for a User in Windows Supervisor App](https://oloid.help/en/articles/13842978-how-to-create-passkey-for-a-user-in-windows-supervisor-app)
* Enable Passkey toggle must be turned on in the Tenant Admin portal. For more, refer: [Oloid Platform - How to enable Passkey in Tenant Admin Portal for Windows Login](https://oloid.help/en/articles/11035277-oloid-platform-how-to-enable-passkey-in-tenant-admin-portal-for-windows-login)

## Steps to sign in to Windows device when passkey is enabled

1. On the Windows lock screen, do the following:
   1. Click **Sign-in options**.

      ![Authentication when Passkey is Enabled... - screenshot 1](https://mintcdn.com/oloid-999c42b2/pBwn4QiXrtMvy9PW/images/intercom/14338271/6faa7742-4e4a-41ec-9b56-58697982d959-d911507d.png?fit=max\&auto=format\&n=pBwn4QiXrtMvy9PW\&q=85\&s=f758c03923c09a8cb3ecc8cc63e5dbf3)

      The Windows login app is displayed.
   2. Select **Windows login app**.

      ![Authentication when Passkey is Enabled... - screenshot 2](https://mintcdn.com/oloid-999c42b2/pBwn4QiXrtMvy9PW/images/intercom/14338271/284c288c-36be-4d5e-aeb4-42a6d04de7bc-1cac1b11.png?fit=max\&auto=format\&n=pBwn4QiXrtMvy9PW\&q=85\&s=791d98b4fd255c9787fd3047653efeae)
   3. Select **Login with OLOID**.

      ![Authentication when Passkey is Enabled... - screenshot 3](https://mintcdn.com/oloid-999c42b2/pBwn4QiXrtMvy9PW/images/intercom/14338271/3027aaf5-4fc3-4869-8b25-95ecc7748ce0-47fb83d7.png?fit=max\&auto=format\&n=pBwn4QiXrtMvy9PW\&q=85\&s=f693999d23f9d96b4047add28259fc57)

      The Windows login app opens and the **Scan Badge** page is displayed.
2. Tap the **Badge** on the **Badge Reader** to scan it.

   ![Authentication when Passkey is Enabled... - screenshot 4](https://mintcdn.com/oloid-999c42b2/pBwn4QiXrtMvy9PW/images/intercom/14338271/image-d87fee7d.png?fit=max\&auto=format\&n=pBwn4QiXrtMvy9PW\&q=85\&s=d3cb71891e1aae3ba3ce73b95dd30405)

   On Badge authentication, the **Enter PIN** pop-up box is displayed.
3. Enter the **PIN** then click **Submit**.

![Authentication when Passkey is Enabled... - screenshot 5](https://mintcdn.com/oloid-999c42b2/pBwn4QiXrtMvy9PW/images/intercom/14338271/89dfc4a7-836c-447f-8c26-d3feabde1d53-2c6e1a97.png?fit=max\&auto=format\&n=pBwn4QiXrtMvy9PW\&q=85\&s=7f43dab3c85d5be89f95239cb73b411c)

On PIN authentication, you are signed in to the Windows device.

> [!NOTE]
>
> **Note:** If the user has multiple passwords configured in the Oloid Portal, then the **Choose Your Account** page is displayed. You can select a specific account to sign in successfully.

![Authentication when Passkey is Enabled... - screenshot 6](https://mintcdn.com/oloid-999c42b2/pBwn4QiXrtMvy9PW/images/intercom/14338271/image-0ca0ac79.png?fit=max\&auto=format\&n=pBwn4QiXrtMvy9PW\&q=85\&s=f7b856974565e30fadb00a9b6c4313a3)

### Passkey Authentication Flow

When a user initiates login on the Oloid authentication page, the system is prompted to authenticate using a previously registered passkey. The authentication request is handled by the user’s device, where the user verifies their identity Oloid Credentials, this verification happens locally on the device.

Once the user is successfully verified, the device generates a secure authentication response and sends it to the server. The server validates this response using the registered credentials and, upon successful verification, grants the user access to the application.

This ensures that sensitive credential handling is confined to the device and backend systems, with no passwords being transmitted or exposed. As a result, passkey authentication provides a secure and seamless login experience while minimizing the risk of phishing and credential theft. If authentication fails, the system proceeds with fallback authentication methods if they are configured.