|
| 1 | +--- |
| 2 | +title: Third-party passkey manager support |
| 3 | +description: This topic describes the third-party API plugin support for third-party passkey providers on Windows. |
| 4 | +ms.topic: article |
| 5 | +ms.date: 12/12/2024 |
| 6 | +--- |
| 7 | + |
| 8 | +# Third-party passkey manager support |
| 9 | + |
| 10 | +This topic describes the third-party credential manager API plugin support for third-party passkey providers on Windows. It showcases a demo app named Contoso Passkey Manager. |
| 11 | + |
| 12 | +## Contoso Passkey Manager |
| 13 | + |
| 14 | +Windows 11 supports a third-party plugin model for passkeys. Contoso Passkey Manager is a demo app that demonstrates this passkey provider support. |
| 15 | + |
| 16 | +> [!WARNING] |
| 17 | +> Contoso Passkey Manager is designed for passkey creation and usage testing only. Don't use the app for production passkeys. |
| 18 | +
|
| 19 | +### Step 1: Installation |
| 20 | + |
| 21 | +1. Set up your development environment for WinUI 3 development (see [Install tools for the Windows App SDK](/windows/apps/windows-app-sdk/set-up-your-development-environment)). |
| 22 | +2. Clone the Windows-classic-samples GitHub repo for the [Contoso Passkey Manager sample](https://github.com/microsoft/Windows-classic-samples/tree/main/Samples/PasskeyManager) app. |
| 23 | +3. In Visual Studio, open the Contoso Passkey Manager solution that you just cloned, carefully follow the instructions at the link above, build the sample, and then run it to confirm installation. |
| 24 | + |
| 25 | +### Step 2: Setup |
| 26 | + |
| 27 | +1. Go to **Settings** > **Accounts** > **Passkeys**, and then **Advanced options**. |
| 28 | +2. Switch the toggle to **On** for Contoso Passkey Manager. |
| 29 | +3. Complete the Windows Hello user verification, and now you can save passkeys to the Contoso Passkey Manager. |
| 30 | + |
| 31 | + |
| 32 | + |
| 33 | +### Step 3: Passkey creation |
| 34 | + |
| 35 | +1. Navigate to a website such as [webauthn.io](https://webauthn.io/). |
| 36 | +2. Create a test user name, and click **Register**. |
| 37 | +3. You will be prompted, on saving your passkey, with the Contoso Passkey Manager. Click **Continue**. |
| 38 | + |
| 39 | + |
| 40 | + |
| 41 | +4. The Contoso Passkey Manager app will open. Click **Create** to create the credential in Contoso Passkey Manager. |
| 42 | +5. Complete user verification with Windows Hello, and the passkey is created. |
| 43 | +6. You can see your saved passkeys by opening the Contoso Passkey Manager. |
| 44 | +7. If you want to test different experiences, then you can toggle **Simulate Vault Unlock** to test a vault unlock user experience when saving a passkey. The **Minimize UI** toggle simplifies the step that opens the passkey manager, and the experience flow will instead just be with user verification on Windows Hello. |
| 45 | + |
| 46 | + |
| 47 | + |
| 48 | +### Step 4: Passkey authentication |
| 49 | + |
| 50 | +1. Input your username, and click **Authenticate**. |
| 51 | +2. Select to sign in with the passkey saved to the Contoso Passkey Manager. |
| 52 | + |
| 53 | + |
| 54 | + |
| 55 | +3. Complete user verification with Windows Hello to authenticate. |
| 56 | +4. You've successfully logged in. |
| 57 | + |
| 58 | +## Next steps |
| 59 | + |
| 60 | +To integrate with the third-party plugin capability, go to [webuathn](https://github.com/microsoft/webauthn) to find the header files. |
| 61 | + |
| 62 | +## See also |
| 63 | + |
| 64 | +* [WebAuthNGetPlatformCredentialList](/windows/win32/api/webauthn/nf-webauthn-webauthngetplatformcredentiallist) |
| 65 | +* [webauthn.h header](/windows/win32/api/webauthn/) |
0 commit comments