Auth0 Lock does not natively support a combined identifier-first and passkeys flow without manual WebAuthn implementation. To achieve this functionality, switch to the New Universal Login experience or develop a custom user interface using the Auth0.js SDK. Users often seek to enable an identifier-first login flow that supports both passwords and passkeys within the Auth0 Lock widget.

• Auth0
• Auth0 Lock
• Passkeys
• Identifier-First Login

Does Auth0 Lock support an identifier-first login flow with passkeys?

Auth0 Lock does not natively support the combined identifier-first and passkeys flow. This specific functionality is exclusive to the New Universal Login experience. 

NOTE: The Classic Login engine, which powers Auth0 Lock, is no longer receiving new feature updates, such as native passkey integration for identifier-first flows.

What are the steps to enable the New Universal Login experience?

To switch to the New Universal Login experience, navigate to the branding settings, disable customization for the classic login tabs, save the universal login settings, and update the authentication profile.

1. Navigate to Branding > Universal Login in the Auth0 Dashboard.
2. Select Manage Classic Login.
3. Ensure the toggle for Customization is Off for the three tabs: Login, Password Reset, and Multi-Factor Authentication.
4. Go to the Settings tab.
5. Select Universal Login.
6. Select Save Changes.
7. Go to Authentication > Authentication Profile.
8. Select Identifier First or Identifier First + Biometrics.

What are the steps to develop a custom user interface for the Classic Login experience?

To maintain the Classic Login experience, build a bespoke login interface using the Auth0.js SDK and manually manage the conditional logic.

• Use the Auth0.js SDK to build a bespoke login experience.
• Manually manage the conditional logic for identifiers and passkey triggers.

Related References

• Passkeys
• Activate Passkeys and Let Your Users Log in without a Password
• Authentication with Passkeys