Multi-factor authentication
LuxID MFA methods (OTP, TOTP, passkeys, LuxTrust), token claims amr and acr, minimum assurance configuration, step-up flows, and recovery paths.
LuxID MFA methods (OTP, TOTP, passkeys, LuxTrust), token claims amr and acr, minimum assurance configuration, step-up flows, and recovery paths.
Step-up authentication UX, per-method flows for OTP, TOTP, passkeys, and LuxTrust, recovery paths, lockout prevention, and re-authentication patterns.
All WebAuthn passkey ceremonies run on LuxID Universal Login - Partners never call WebAuthn APIs. What you observe in tokens and what it means for native apps.
Passkey education, device binding, browser compatibility, fallback flows, and cross-device sign-in UX for LuxID integrations.
WebAuthn/FIDO2 passkeys on LuxID: device binding, platform and roaming authenticators, token claims, fallback behaviour, and phishing resistance.
End-to-end sequence diagrams for first-time sign-in, returning sign-in, MFA challenge, LuxID Verified, LuxID Pro federation, account linking, and logout.