Study Passkeys and Keycloak Support

[francis-pouatcha]

Description

Description:

This ticket serves as a request for the Keycloak Competence Center to investigate and gain a comprehensive understanding of passkeys, specifically in the context of their potential integration with Keycloak.

Background:

Passkeys are a new industry standard for passwordless authentication, designed to provide a more secure and user-friendly alternative to traditional passwords. They leverage public-key cryptography and the WebAuthn standard to allow users to authenticate using their device's built-in security mechanisms (e.g., fingerprint, face recognition, PIN).

Objectives:

• Understanding Passkeys:
  • Gain a deep understanding of the passkey technology, including its underlying principles, architecture, and security considerations.
  • Analyze the benefits and limitations of passkeys compared to existing authentication methods.
  • Research the current state of passkey adoption and industry best practices.
• Keycloak Support for Passkeys:
  • Evaluate Keycloak's current capabilities for supporting passkey authentication.
  • Identify potential integration points and challenges in incorporating passkeys into Keycloak.
  • Assess the effort required to implement passkey support in Keycloak, considering different deployment scenarios and customization options.
• Customer Readiness:
  • Develop internal documentation and resources to educate team members about passkeys and Keycloak integration.
  • Prepare to address customer inquiries and requests regarding passkey implementation and support.
  • Proactively identify potential use cases and benefits of passkeys for our customers.

Expected Outcome:

• A comprehensive report summarizing the findings of the passkey study.
• A clear roadmap outlining the potential integration of passkeys with Keycloak.
• Readiness to support customers in adopting passkeys for their authentication needs.

Priority: Medium

Assigned to: Keycloak Competence Center

Due Date: 2024-11-30

Additional Notes:

• This study is crucial to ensure that we stay ahead of the curve in authentication technology and can effectively address our customers' evolving security needs.
• Collaboration with relevant stakeholders (e.g., security experts, developers, customer support) is encouraged throughout this process.
• Relevant resources and links to passkey documentation should be included in the study report.

This ticket aims to proactively equip the Keycloak Competence Center with the knowledge and resources necessary to effectively navigate the emerging landscape of passkey authentication.