FIDO platform authenticator journey
This user journey documents the high level, end-to-end goals for end users and relying parties using platform authenticators. This journey does not include passkey flows.
Product managers, UX designers, engineers, and architects at relying parties
Promote the availability of a FIDO sign-in across multiple touch points and a variety of marketing channels.
Invite people who are signed-in on devices that support FIDO Authentication to register using a simple value prop sentence and link to the registration page.
Educate people about FIDO and allow them to register with a clear “Register” button while showing options to leave registration or “Learn more”.
Allow people to sign in with FIDO using a button that says “Sign in” and shows a biometric symbol.
Ensure people can sign out of your website using the same UI they used previously with username and password.
FIDO security key user journey
This user journey documents the high level, end-to-end goals for end users and relying parties using hardware security keys with consumers. This journey does not include the purchasing and unboxing of security keys.
Product managers, UX designers, engineers, and architects at relying parties.
** Users can potentially pair the FIDO desktop authenticator with a FIDO security key as a second, FIDO-supported method for a “passwordless” experience.
Promote awareness of available alternatives to password-only authentication using multiple channels (email, social media, snail mail, etc). As sign in promotes awareness of the availability of an alternative to password-only authentication. After sign-in, make Security and Privacy settings a discoverable destination.
Empower users to take an active role in protecting their accounts by helping them compare and learn about authentication options. Offer the option to “Learn more” and from there, the options to get more information and ways to purchase security keys.
Allow people to name their key when they enroll. Display a success message when complete and the option to enroll additional security keys.
Show enrolled security keys and include ability to add, rename, or delete them. Keep this user interface on a single page that doesn’t require clicking into multiple screens or modes.
Allow people to sign in with username, password, and security key. Then, allow people to sign out using the same UI they used previously with only their username and password.