Did I miss this? Looks like we have to enable Passkey on Google Workspace by April

[TwistedHelixis]

I think I have missed some important info.

 

Just been sent the following

 

On April 2, 2024, built-in iPhone security keys used through the Google Smart Lock app will be removed from Google Accounts. To make sure you can continue to sign in, create a passkey on your iPhone

 

https://support.google.com/accounts/answer/9289445?hl=en&co=GENIE.Platform%3DiOS

 

If you are a Google Workspace administrator, you can refer to instructions sent to you via email on June 5, 2023. Learn more about enabling passkeys for Workspace accounts.

https://support.google.com/a/answer/13529161?sjid=12388089273209004520-EU

 

On that link above it has

If this setting is turned off after a user turned on skip password and added a passkey to their account, they will no longer be able to skip a password challenge. However, they can still be prompted for a passkey for second-factor authentication.

 

Do I need to tick 'Allow users to skip passwords at sign-in by using passkeys', on our Workspace domain before April? Yes or No?

[mavhc]

It's just saying if you used the current proprietary 2fa via that iphone app, then you have to switch to passkeys, the standards based replacement.

[TwistedHelixis]

It's just saying if you used the current proprietary 2fa via that iphone app, then you have to switch to passkeys, the standards based replacement.

 

I think I get what its saying, not 100% sure.

From a Workspace admin perspective, do I need to enable that tick box in 'Security > Authentication > Passwordless', for my users that access their Google Workspace apps using an iPhone as 2fa, to be able to continue accessing the schools Google apps, or do the users just need to switch to passkey on their iPhone, and regardless of the setting in Workspace, they will still be able to log in?

 

Would you tick or leave it un-ticked?

[mavhc]

They need to switch to passkey on their phone, the app will be obsolete.

 

The tick box is nothing to do with it really, it's saying do you want password+passkey, or just passkey?