Deploy FIDO2/WebAuthn passwordless authentication using security keys and platform authenticators, covering WebAuthn API integration, FIDO2 server configuration, passkey enrollment, biometric authentication, and migration from password-based systems aligned with NIST SP 800-63B AAL3. Use when implementing passkey login, configuring a FIDO2/WebAuthn server, or replacing passwords with phishing-resistant authentication.
Start a fresh conversation. Replace the highlighted placeholders.
Use implementing-passwordless-authentication-with-fido2 to implement and document a FIDO2/WebAuthn passwordless-login design in an authorized test environment for [application, IAM architecture, and migration requirements], including enrollment, audit logging, and compliance evidence.
Required inputs
[application, IAM architecture, and migration requirements]
User-approved starter prompt based on a pinned source version; check current skill requirements before running. Task evidence ↗
SKILL.md
name: implementing-passwordless-authentication-with-fido2description: Deploy FIDO2/WebAuthn passwordless authentication using security keys and platform authenticators, covering WebAuthn API integration, FIDO2 server configuration, passkey enrollment, biometric authentication, and migration from password-based systems aligned with NIST SP 800-63B AAL3. Use when implementing passkey login, configuring a FIDO2/WebAuthn server, or replacing passwords with phishing-resistant authentication.domain: cybersecuritysubdomain: identity-access-managementtags: - iam- identity- access-control- authentication- fido2- webauthn- passwordlessversion: '1.0'author: mahipallicense: Apache-2.0atlas_techniques: - AML.T0051- AML.T0054- AML.T0056nist_ai_rmf: - MEASURE-2.7- MEASURE-2.5- GOVERN-6.1- MAP-5.1nist_csf: - PR.AA-01- PR.AA-02- PR.AA-05- PR.AA-06mitre_attack: - T1078- T1110- T1556- T1098
Implementing Passwordless Authentication with FIDO2
Overview
Deploy FIDO2/WebAuthn passwordless authentication using security keys and platform authenticators. Covers WebAuthn API integration, FIDO2 server configuration, passkey enrollment, biometric authentication, and migration from password-based systems aligned with NIST SP 800-63B AAL3.
When to Use
When deploying or configuring implementing passwordless authentication with fido2 capabilities in your environment
When establishing security controls aligned to compliance requirements
When building or improving security architecture for this domain
When conducting security assessments that require this implementation
Prerequisites
Familiarity with identity access management concepts and tools
Access to a test or lab environment for safe execution
Python 3.8+ with required dependencies installed
Appropriate authorization for any testing activities
Objectives
Implement comprehensive implementing passwordless authentication with fido2 capability
Establish automated discovery and monitoring processes
Integrate with enterprise IAM and security tools
Generate compliance-ready documentation and reports
Align with NIST 800-53 access control requirements
Security Controls
Control
NIST 800-53
Description
Account Management
AC-2
Lifecycle management
Access Enforcement
AC-3
Policy-based access control
Least Privilege
AC-6
Minimum necessary permissions
Audit Logging
AU-3
Authentication and access events
Identification
IA-2
User and service identification
Verification
Implementation tested in non-production environment