What’s new - Chrome OS support

More companies are shifting employees from traditional computers to Chrome OS devices to help improve their security posture. Beyond Identity uses hardware-backed passkeys on Chrome OS to protect your SSO applications. This release includes the following: 

• Secure Authentication to SSO applications on Chrome OS using hardware-backed keys
• Passkey Enrollment via Email & IDP Authorized Enrollment via existing IdP
• Passkey Lifecycle Administration:
  • Admin console (Create, Delete, Revoke)
  • User console (Create, Delete)
  • Hosted Web Authenticator Passkey landing page (Delete)

This is an early access feature. There will be some limitations until additional Chrome OS features are finalized.

Contact your Customer Success Manager/Support to request access to this feature.

For detailed instructions on configuring and using Chrome OS, see Configuring Chrome OS authentication.

User experience

The following interactive videos show the user experience on Chrome OS:

Enrolling using a FIDO2 authenticator

This video shows the user experience when enrolling a FIDO2 Authenticator (local device password).

End-user login to WebSSO - Username and Password + FIDO2 Enrollment 

Logging in using a FIDO2 authenticator

This video shows the user experience when logging into Chrome with the username and password + FIDO2 Authenticator (in this case the local device password, this is the Google Workspace password). 

End-user login to WebSSO - Username and Password + FIDO2 Authenticator