After a passkey is bound to a Resource Access Management (RAM) user, the RAM user can use the passkey to log on to the Alibaba Cloud Management Console. A passkey-based authentication system first authenticates the binding between a device and passkey to verify the device validity. Then, the system uses authentication methods built in the device to authenticate the device owner. The built-in authentication methods are fingerprint recognition, facial recognition, and PIN codes.
Step 1: Enable RAM users to log on by using passkeys
A RAM administrator must enable the corresponding feature in the Security section to allow RAM users to log on by using a passkey.
Log on to the RAM console as a RAM administrator.
In the Security section of the Settings page, click Modify.
In the Security dialog box, select Enable for the Allow users to login with passkey parameter.
Step 2: Log on to the Alibaba Cloud Management Console as a RAM user
After a passkey is bound to a RAM user, the RAM user can use the passkey to log on to the Alibaba Cloud Management Console. In the following example, a Windows operating system later than Windows 10 is used.
Log on to the Alibaba Cloud Management Console as the RAM user.
On the RAM User Logon page, enter the username of the RAM user and click Next.
Click Passkey Logon.
NoteIf you do not want to use a passkey to log on, you can click Logon using password. This way, you can use the password of the RAM user to log on.
If multiple types of passkeys are bound, select a device type.
Complete authentication by using the passkey from a computer or mobile device as prompted.