How to Add a Passkey Manually

Prev Next

Overview

To add a passkey, the IT admin uses the console to send the user an invitation email with instructions for downloading the Beyond Identity Authenticator and activating their account.

Adding a passkey manually is useful in the following scenarios:

  • The user did not receive the original activation email

  • The user was unable to successfully activate their account

  • Additional troubleshooting is required

What You'll Learn

This article explains how to manually add a passkey to a user account.

Adding a Passkey Manually

Steps

  1. Log in to your Secure Work tenant.

  2. Inside the console, click Users from the left-hand navigation panel.
    revoke 1.png

  3. If the user has already been added, click their name. If not, you’ll need to add the user before proceeding.

  4. In the Profile tab, click Enroll a Passkey, then select Passkey from the drop-down menu.

1.png

  1. There are two methods you can choose from:

    1. Send an enrollment email

    2. Generate 9-character code
      2.png

  2. To Send an enrollment email select it from the Select Method menu. Then, select a specific email template or the default template. Then, click Proceed & send email.

    4.png

  3. Read the messages in the dialog box that will display, then click Close.

    5.png

  4. To Generate a 9-character code, select it from the menu.

  5. Next, click Generate 9-character code.

    A unique 9-digit code will appear for you to share with the user so they can add their passkey. You can share the code via messaging or over the phone. Note that the code expires after 60 seconds, and the user must enter it in the device running the Beyond Identity Authenticator before it expires.

6.png

7.png

Important: Never share the code with unauthorized users.


  1. After sharing the code, click Close.

    That's it!

In both manual passkey enrollment methods, the user must take action, either by clicking the link in the invitation email or by entering the code you provide into the device running the Authenticator.

Once the user completes the enrollment process, their name will appear in the Users list with the status marked as Enrolled. If enrollment is not completed, their status will remain as Pending.

8.png

User Enrollment Status Definitions

Enrollment Status

Description

Enrolled

The user has been fully onboarded and has created a binding passkey.

Pending

The user hasn't completed the onboarding process and there isn't a binding that's been created.