Setting up a passkey

A passkey can be used for passwordless login or as a second factor. Passkeys are administered at https://my.scc.kit.edu/token, just like other tokens.

Password-Free Login with a Passkey

In addition to the traditional login method using a username and password, our central SSO service also offers the option “Log in with Passkey.” If your browser does not automatically open a dialog for passwordless login, click this button first.

Registering Your Device for Password-Free Login

Please visit the website https://my.scc.kit.edu/token and click the “New Token” button. Switch to the “Passkey” tab and begin setup by clicking “Start.” Your browser and operating system will then guide you through the rest of the institution’s setup process. If a prompt appears informing you that “kit.edu” will access data on your device, you must grant this permission. Otherwise, the setup cannot be completed successfully.

If the setup process fails, the temporarily generated passkey will be automatically deleted. You will receive an email notification about this.

You can find more detailed instructions on the following pages:

Passkey Support

For secure, password-free login, the browser, operating system, and secure device must be compatible. The possible combinations are vast, and not all of them can be supported by the SCC.

The following have been successfully tested

  • Operating systems: Windows 11, macOS, Ubuntu, Fedora
  • Browsers: Firefox, Google Chrome, Microsoft Edge, Safari
  • Devices: iPhone, Android phones, Windows devices with Windows Hello, MacBooks, and various USB drives

In particular, centrally administered workstations are supported with Windows Hello-compatible devices (requires Windows 11 23H2 with TPM and a Windows Hello-enabled device: fingerprint reader or camera).

M365 on macOS, iOS, and Android

Passkeys are currently no longer supported in the native M365 apps on macOS, iOS, and Android. In this case, please use a different token type, such as TOTP.

Passkeys with a USB Drive

Passkeys in the form of USB drives are well-suited for retrofitting or for special requirements. The following have been successfully tested, among others:

  • Yubikey 5 NFC, Yubikey Bio, Yubikey “Security Key NFC” (blue)
  • Thetis PRO-C FIDO2

However, lower-cost models without biometric authentication must be unlocked with a password to use them and therefore do not offer the convenience of a fully password-less login.