> For the complete documentation index, see [llms.txt](https://docs.1kosmos.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.1kosmos.com/authentication/passwordless-for-web-apps.md).

# PASSWORDLESS FOR WEB APPS

- [Overview](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/overview.md): Passwordless for Web Apps lets users access web applications without entering a password. 1Kosmos acts as the Identity Provider (IdP) for web applications integrated using standard protocols.
- [Authentication Matrix](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/authentication-matrix.md): The table below outlines the authentication modes supported across different login methods. Availability of each mode depends on how authentication journeys are configured.
- [Analytics](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/analytics.md): The Analytics Dashboard gives Community Administrators a graphical overview of user activity across the tenant. Data can be filtered by today, last 7 days, last 30 days, or a custom date range.
- [Login Methods](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/login-methods.md)
- [Password Reset](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/login-methods/password-reset.md): 1Kosmos gives Community Administrators control over how end users reset forgotten passwords.
- [FIDO Keys](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/login-methods/fido-keys.md): FIDO passkeys enable passwordless login using biometrics or hardware security keys instead of passwords.
- [WebAuthn](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/login-methods/fido-keys/webauthn.md): FIDO2 Web Authentication (WebAuthn) is a standard web API, built into modern web browsers and related web platform infrastructure, used to securely authenticate users across various sites and devices.
- [LiveID (Biometric Authentication)](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/login-methods/liveid-biometric-authentication.md): LiveID is a 1Kosmos signature feature that enables workforce users to enroll their face once and authenticate on any supported device - desktop, mobile, or any camera-enabled device.
- [Behavioral Authentication](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/login-methods/behavioral-authentication.md): Behavioral Authentication in 1Kosmos analyzes how a user interacts with their device, specifically their typing pattern, and compares it against their enrolled behavioral profile to verify identity.
- [Orion Desktop Authenticator](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/login-methods/orion-desktop-authenticator.md): Orion Authenticator is a desktop application that delivers strong, passwordless authentication and TOTP-based MFA directly from a user's Mac or Windows workstation — without requiring a mobile device.
- [Hardware Tokens](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/login-methods/hardware-tokens.md): HMAC-based One-Time Password (HOTP) tokens are hardware devices that generate single-use passcodes based on a shared secret and an incrementing counter.
- [Adaptive Authentication](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/adaptive-authentication.md): Adaptive Authentication verifies the user's identity based on factors such as location, device status, and end-user context.
- [Multi-Factor Authentication](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/multi-factor-authentication.md): Multi-factor Authentication (MFA) requires users to verify their identity using two or more factors before gaining access.
- [Use cases](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/use-cases.md)
- [Entra Passkey for Frontline Workers](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/use-cases/entra-passkey-for-frontline-workers.md): 1Kosmos enables frontline workers to authenticate into Microsoft Entra using a passkey verified through LiveID biometric (selfie).
- [Mobile Authentication via Microsoft Intune MDM](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/use-cases/entra-passkey-for-frontline-workers/mobile-authentication-via-microsoft-intune-mdm.md)
- [Browser Authentication via Chrome Extension](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/use-cases/entra-passkey-for-frontline-workers/browser-authentication-via-chrome-extension.md)
- [In-Flight Enrollment for EAM (Behavior Auth + PIN)](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/use-cases/in-flight-enrollment-for-eam-behavior-auth-+-pin.md): Enable frontline workers to enroll Behavior Auth (typing pattern) and set a PIN in-flight during EAM login - passwordless second-factor authentication with no personal device required.
- [FAQs](https://docs.1kosmos.com/authentication/passwordless-for-web-apps/faqs.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.1kosmos.com/authentication/passwordless-for-web-apps.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.