Use Passkey Authentication
## Review Checklist
1. Should this be enabled for Pleasanter.net (dedicated environment)?
1. Should we purchase a security key for operational verification?
## Limitations
1. Passkey authentication is only available in HTTPS contexts.
1. If a password manager extension is installed in the browser, it may take priority over Windows Security. To use Windows Security authentication, cancel the extension's process.
1. If a certain amount of time passes during the authentication process, it will time out and the user will be notified. The same applies if the user cancels the authentication. Please repeat the procedure as necessary.
1. Passkey authentication is supported on Windows 11 and later, macOS 13.0 (Ventura) and later, iOS 16.0 and later, iPad OS and later, and Android 9.0 and later.
1. Please keep your web browser updated to the latest version.
1. Use the standard camera app of each OS to read QR codes.
1. If you cannot read QR codes with the camera app on Android, please use Google Lens.
## Overview
To use passkey authentication, the following configuration is required.
## Server-side Configuration
Configure each parameter under PasskeyParameters in "[Authentication.json](/en/manual/authentication-json)".
```json
{
...
"PasskeyParameters": {
"Enabled": true,
"ServerName": "Pleasanter",
"ServerDomain": "localhost",
"Origins": [ "https://localhost:44331" ]
},
...
}
```
#### PasskeyParameters Parameter List
|Parameter Name|Example|Description|
|-|-|-|
|Enabled|true|Enable or disable passkey authentication. Default value is false.|
|ServerName|"Pleasanter"|Specifies the server name.|
|ServerDomain|"localhost"|This is an identifier that indicates the name of this service. It is used to link the passkey with the service. Please set only the domain name, such as pleasanter.net.|
|Origins|["https://localhost:443"]|This setting is used to verify that the URL the user accesses in their browser completely matches the registered URL. Login attempts from unregistered URLs will be rejected. Register the entire URL displayed in the browser's address bar. If the port number is different, it will be treated as a separate URL.|
## Client-side Configuration
On the client side, you need to create and save a passkey. The procedure differs depending on where you save the passkey.
<details>
<summary style="font-weight:bold; color:darkblue">📱 Save to Smartphone</summary>
This section explains how to create a passkey and save it to your smartphone. Please turn on Bluetooth in your smartphone's settings app beforehand.
1. Log in to Pleasanter with the account for which you want to create a passkey. Use an authentication method other than passkey authentication for this login.
1. Click "User" in the navigation menu.
1. Click "Edit profile".
1. Click the "Passkey" button in the command button area.
1. The "Passkey" dialog will be displayed. Click the "New" button.
1. Change the passkey storage location to your smartphone. Click "Change".
1. Click "iPhone, iPad, or Android device".
1. Read the displayed QR code with your smartphone's camera app and tap "Save a passkey".
 
1. Add the passkey to your smartphone. Tap the "Add Passkey" button. You will be prompted for smartphone user authentication at this time.
1. Once the passkey is saved to your smartphone, the created key will be displayed in the "Passkey" dialog. Click the "Close" button.
</details>
<details>
<summary style="font-weight:bold; color:darkblue">💻 Save to Windows</summary>
This section explains how to create a passkey and save it to Windows.
1. Log in to Pleasanter with the account for which you want to create a passkey. Use an authentication method other than passkey authentication for this login.
1. Click "User" in the navigation menu.
1. Click "Edit profile".
1. Click the "Passkey" button in the command button area.
1. The "Passkey" dialog will be displayed. Click the "New" button.
1. Click the "Continue" button.
1. Complete identity verification with Windows Hello. Below is an authentication screen using a PIN.
1. Once identity verification is complete, the created key will be displayed in the "Passkey" dialog. Click the "Close" button.
</details>
<details>
<summary style="font-weight:bold; color:darkblue;">🔑 Save to Other Storage Locations</summary>
In addition to the above, you can use the following as passkey storage locations. Please refer to each product's documentation for details.
1. Security key
1. Third-party password managers provided as browser extensions
1. Password managers built into browsers
If you select "3. Password managers built into browsers" from the above, please cancel passkey storage by Windows Security.
It will fallback and become selectable.
</details>
## Login Procedure
For login procedures when "🔑 Save to Other Storage Locations" is selected, please follow the on-screen instructions.
<details>
<summary style="font-weight:bold; color:darkblue">📱 Log in with a Passkey Saved to Smartphone</summary>
1. Open the login screen with the account for which you created the passkey and click the "Log in with passkey" button.
1. Select the saved passkey type. Click "iPhone, iPad, or Android device".
1. Read the displayed QR code with your smartphone's camera app and tap "Sign in with a passkey".
 
1. A confirmation message will appear at the bottom of your smartphone screen. Tap the "Use Passkey" button. You will be prompted for smartphone user authentication at this time.
You can now log in to Pleasanter.
</details>
<details>
<summary style="font-weight:bold; color:darkblue">💻 Log in with a Passkey Saved to Windows</summary>
1. Open the login screen with the account for which you created the passkey and click the "Log in with passkey" button.
1. Complete identity verification with Windows Hello. Below is an authentication screen using a PIN.
You can now log in to Pleasanter.
</details>
## Editing Passkeys
You can change the title (name) of a created passkey or delete unnecessary passkeys from Pleasanter.
<details>
<summary style="font-weight:bold; color:darkblue">Change Passkey Title</summary>
1. Log in to Pleasanter.
1. Click "User" in the navigation menu.
1. Click "Edit profile".
1. Click the "Passkey" button in the command button area.
1. In the "Passkey" dialog, click the passkey you want to change.
1. The "Edit Passkey" dialog will be displayed. Edit the "Title" and click the "Change" button.
1. The "Edit passkey" dialog will close and you can confirm the title change. Click the "Close" button.
</details>
<details>
<summary style="font-weight:bold; color:darkblue">Delete Passkey</summary>
1. Log in to Pleasanter.
1. Click "User" in the navigation menu.
1. Click "Edit profile".
1. Click the "Passkey" button in the command button area.
1. Click the checkbox on the left side of the passkey you want to delete to enable it, then click the "Delete" button.
1. A confirmation dialog will appear, so check the content and click the "OK" button.
1. The "Operation" dialog will close and you can confirm that the passkey has been deleted.
1. If necessary, delete the saved passkey from each OS or web browser. Check each product's manual for the storage location.
</details>
## Supported Versions
|Supported Version|Details|
|-|-|
|1.5.1.0 and later|Feature added|
## Related Information
<div id="ManualList"><ul><li><a href="/en/manual/authentication-json">Set Parameter: Authentication.json</a><span>02.10.2026 up</span></li></ul></article></div><input id="SearchTextHidden" type="hidden" value="" />
