This Knowledge Base Article explains why Passkey Local Enrollment is sometimes skipped.

When a Cross Device Passkey (a QR code or a dedicated device) is used, the passkey-enrollment-local Prompt should be displayed so the end-user can register a Local Passkey.

However, in some conditions, this screen is not displayed even if the device is capable of using local passkeys.

• Passkeys
• Local Enrollment

The Auth0 server decides if it should present the Local Enrollment prompt by checking these two elements:

• PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable()
  • The return value of this method must be true.
• PublicKeyCredential.authenticatorAttachment
  • It must be "cross-platform."

However, the isUserVerifyingPlatformAuthenticatorAvailable method can sometimes return false negatives.

For example,

• A bug in the OS or browsers: An issue caused by an iOS breaking change was reported in December 2025.
• Device settings: "AutoFill Passwords and Passkeys" and/or iCloud Keychain are disabled in an iPhone device.

Update the device/browser configurations (e.g., enable iCloud Keychain in the iPhone) so the isUserVerifyingPlatformAuthenticatorAvailable method returns true.

The device/browser's capability can be tested on the webauthn.me website.

Another practical workaround is to save the passkey in a storage that can share credentials across devices (Keychain, Google Password Manager, etc) at the Progressive Enrollment screen.