Unable to Configure Passkeys Due to Pending Identifier First Prerequisite
This article explains why the Identifier First login flow prerequisite status remains pending during passkey configuration, even when the Identifier First + Biometrics option is selected in the Authentication Profile.
- Passkeys
- Authentication Profile
- Identifier First
When configuring passkeys, the Passkey Authentication Prerequisites screen displays a list of requirements necessary for the feature to work. As seen in the screenshot below, the following prerequisites are checked:
- Custom Login Page must be disabled
- Disable Requires username or activate flexible identifiers
- Use my own database must be disabled unless Import Users to Auth0 is enabled
- New Universal Login Experience must be enabled
- Identifier First login flow must be enabled: PENDING
The configuration is blocked because the Identifier First login flow status is PENDING. This occurs because the Identifier First + Biometrics option is selected in the Authentication Profile. While the other prerequisites are marked DONE and successfully configured, the system specifically requires the Identifier First authentication flow to be enabled to satisfy the pending requirement, rather than the combined biometrics profile.
-
Navigate to the Auth0 Dashboard > Authentication > Authentication Profile.
-
Select the Identifier First option in the Choose your login flow section.
-
Select Save.
