Enable Passwordless Login using Biometrics (WebAuthn and Auth0)

Note: This video was originally published on July 30, 2021.
Want to know how to provide your users the BEST login experience possible? Well, in this video, I'm going to show you how to use Device Biometrics as part of your login flow to let users login WITHOUT a password.
We'll quickly cover what is WebAuthn and how it works. We'll discuss the two different authentication methods: roaming authenticators like Yubikeys and platform authenticators like Device Biometrics. We'll end by showing you how to enable passwordless login using your fingerprint for your applications.
You can learn more about WebAuthn and debug it yourself in our site: a0.to/web-authn
You can follow our Developer Lab on "WebAuthn with Biometrics" with any of our client application code samples.
WebAuthn with Biometrics Lab:
developer.auth0.com/resources...
Next.js Code Samples:
developer.auth0.com/resources...
We also have a series of SPA code samples that you can use:
developer.auth0.com/resources...
More on WebAuthn Passwordless with Device Biometrics:
auth0.com/blog/auth0-webauthn...
More on WebAuthn:
auth0.com/docs/mfa/fido-authe...
___________________________________________
Learn with Auth0 by Okta
Try Auth0 for free - a0.to/yt-signup
The Auth0 by Okta blog - a0.to/blog
___________________________________________
Follow Us on Social
Twitter - / oktadev
LinkedIn - / oktadev

[@UliTroyo]

I like this QUICK overview of WebAuthn ;)

[@OktaDev]

Glad you liked it... and great pun! ☺

[@FitnessClub8763]

What if i have macbook which dont have fingerprint unlocking system? can i register external scaner device? or biometric device

[@cheema33]

So, do you have to ask your users to sign up for an "Enterprise" account with Authn for this to work?

[@giyaanshgupta]

How does it work if I as a user change my mobile device?

[@krishnachaithanyareddynitt4478]

I am planning to allow third party services(mobile apps or web services) to access one of my APIs securely. I am using Keycloak for authentication. How can I allow those third party service requests via keycloak to access my APIs

[@mraible]

If your APIs are set up as a resource server, then your third-party services will need to register themselves in your Keycloak instance. Then, using the registered client ID, they should be able to get an access token and make requests with it to your API.

[@arunmrao2]

Is this sample NextJS source code available somewhere ?

[@OktaDev]

Hello, Arun! There's no direct repository for this video as that is a feature that you can enable independent of the framework or language that the client application uses :)
You can follow our Developer Lab on "WebAuthn with Biometrics" with any of our client application code samples.
WebAuthn with Biometrics Lab:
developer.auth0.com/resources/labs/authentication/webauthn-with-biometrics#introduction
Next.js Code Samples:
developer.auth0.com/resources/code-samples/web-app/nextjs
We also have a series of SPA code samples that you can use:
developer.auth0.com/resources/code-samples/spa
I suggest getting up and running the Next.js code sample. Once you can log in and log out, you can follow the lab to enable WebAuthn with Biometrics on your sample app.
If you run into any trouble or have any feedback, feel free to drop us a message using the Feedback/Support buttons that you'll find in the code sample and lab pages.

[@Victorzazuetam2]

How would this work with a mobile device?

[@peterakojede8559]

@OktaDev please did you have the source code, I need to integrate this feature in a work I am doing currently.

[@learnnepse5102]

I really need a huge help. Qnyone please help me. I want to use my phone fingerprint for the same purpose. My react app is hosted on my laptop. I can access, login and register using my phone on the same LAN. I want to add fingerprint but not buy external fingerprint. I want to use my phone fingerprint. Using mern application.
Pleaseee help someone

[@kavihansi4681]

Do you found solution for this?

[@magne6049]

you have to log in and out 3 times to enable it? 😞

[@OktaDev]

Hello, there. That should not be the case. Would you like to give it a try using our "WebAuthn with Biometrics" lab?
developer.auth0.com/resources/labs/authentication/webauthn-with-biometrics#introduction

[@magne6049]

@@OktaDev I was referring to the process shown in the video.

[@drtroyturner7464]

I see you got a little soul to you with the way you talk.

[@K-ti2bb]

Thanks. I would appreciate if you remove the music in the next video as it hides your voice and distracts the listeners.