Search for Users with Enrolled Passkeys

Overview

This article will explain whether it is possible to retrieve a list of all users who have enabled passkey authentication.

Applies To

  • Passkeys
  • User search
  • Bulk export

Solution

Currently, it is not possible to perform any user search filtering based on the passkey.

  • Only a subset of attributes is searchable for users; these are listed in the User Search Query Syntax documentation under Searchable fields.
  • Until this is supported, this would require iterating through on a user-by-user basis, inspecting their authenticators using the Get authentication methods Management API endpoint for any users with the type “passkey”

Please note that for bulk operations, searching on a user-by-user basis will be constrained by the tenant’s Management API rate limits:

Please consider raising a feature request if it is desired to have a bulk method of searching/exporting users with passkeys enrolled.