> For the complete documentation index, see [llms.txt](https://docs.1kosmos.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.1kosmos.com/authentication/passwordless-for-web-apps.md).

# PASSWORDLESS FOR WEB APPS

- [Overview](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/overview.md): Passwordless for Web Apps lets users access web applications without entering a password. 1Kosmos acts as the Identity Provider (IdP) for web applications integrated using standard protocols.
- [Authentication Matrix](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/authentication-matrix.md): The table below outlines the authentication modes supported across different login methods. Availability of each mode depends on how authentication journeys are configured.
- [Analytics](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/analytics.md): The Analytics Dashboard gives Community Administrators a graphical overview of user activity across the tenant. Data can be filtered by today, last 7 days, last 30 days, or a custom date range.
- [Login Methods](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/login-methods.md)
- [Password Reset](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/login-methods/password-reset.md): 1Kosmos gives Community Administrators control over how end users reset forgotten passwords.
- [FIDO Keys](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/login-methods/fido-keys.md): FIDO passkeys enable passwordless login using biometrics or hardware security keys instead of passwords.
- [WebAuthn](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/login-methods/fido-keys/webauthn.md): FIDO2 Web Authentication (WebAuthn) is a standard web API, built into modern web browsers and related web platform infrastructure, used to securely authenticate users across various sites and devices.
- [LiveID (Biometric Authentication)](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/login-methods/liveid-biometric-authentication.md): LiveID is a 1Kosmos signature feature that enables workforce users to enroll their face once and authenticate on any supported device - desktop, mobile, or any camera-enabled device.
- [Behavioral Authentication](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/login-methods/behavioral-authentication.md): Behavioral Authentication in 1Kosmos analyzes how a user interacts with their device, specifically their typing pattern, and compares it against their enrolled behavioral profile to verify identity.
- [Orion Desktop Authenticator](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/login-methods/orion-desktop-authenticator.md): Orion Authenticator is a desktop application that delivers strong, passwordless authentication and TOTP-based MFA directly from a user's Mac or Windows workstation — without requiring a mobile device.
- [Hardware Tokens](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/login-methods/hardware-tokens.md): HMAC-based One-Time Password (HOTP) tokens are hardware devices that generate single-use passcodes based on a shared secret and an incrementing counter.
- [Adaptive Authentication](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/adaptive-authentication.md): Adaptive Authentication verifies the user's identity based on factors such as location, device status, and end-user context.
- [Multi-Factor Authentication](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/multi-factor-authentication.md): Multi-factor Authentication (MFA) requires users to verify their identity using two or more factors before gaining access.
- [Use cases](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/use-cases.md)
- [Entra Passkey for Frontline Workers](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/use-cases/entra-passkey-for-frontline-workers.md): 1Kosmos enables frontline workers to authenticate into Microsoft Entra using a passkey verified through LiveID biometric (selfie).
- [Mobile Authentication via Microsoft Intune MDM](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/use-cases/entra-passkey-for-frontline-workers/mobile-authentication-via-microsoft-intune-mdm.md)
- [Browser Authentication via Chrome Extension](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/use-cases/entra-passkey-for-frontline-workers/browser-authentication-via-chrome-extension.md)
- [In-Flight Enrollment for EAM (Behavior Auth + PIN)](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/use-cases/in-flight-enrollment-for-eam-behavior-auth-+-pin.md): Enable frontline workers to enroll Behavior Auth (typing pattern) and set a PIN in-flight during EAM login - passwordless second-factor authentication with no personal device required.
- [FAQs](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/faqs.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.1kosmos.com/authentication/passwordless-for-web-apps.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.