09/27/2026

Simplifying Passwordless Sign-In with FIDO2 Discoverable Credentials

Oracle

Passwords can create friction for users and risk for organizations. They’re easy to forget, frequently reused, and remain a primary target for phishing and other account takeover attacks. Oracle is moving toward a sign-in experience designed to be simpler and more secure with support for FIDO2 discoverable credentials in OCI IAM. 

Discoverable credentials, or resident keys, let users sign in without entering a username or a password. The user’s platform presents the appropriate passkey, which the user confirms using built-in platform security such as a fingerprint, face recognition, or touch of a hardware security key. The result is a fast, easy, one-click sign-in experience that uses FIDO2 authentication and built-in platform verification. 

In a discoverable credential sign in flow, the application presents a simple Continue with Passkey button. It does not know, or display, the user’s identity before authentication. The user’s platform (browser and OS) prompts them to select the appropriate passkey from the list of eligible passkeys (if there are more than one). After platform-layer validation, the application simply accepts the credential and authenticates the user.