Managing user verification

In its 26.1 release, FortiIdentity Cloud adds a new Passkey tab in realm settings (Settings >Realm). It enables administrators to select user verification rules with passkeys to suit their organizations compliance needs.

To configure user verification rules of a realm:

1. Click Settings > Realm and select the realm you want to configure.
2. Click the Passkey tab.
3. Select one of the following options:

   Parameter	Description
   Preferred	This is the default assigned method when a realm is created. It uses user verification when available, but allows the process to continue if it isn’t supported.
   Discouraged	Authentication may not require a PIN or biometric check. It verifies passkey possession only and is not recommended for high-risk or passwordless login scenarios.
   Required	This is the strictest method and the most restrictive. User verification is mandatory. The process will fail if the user cannot complete the verification.

4. Click Apply Changes.