Overview
Security Key Authentication is a highly secure two-factor authentication (2FA) method employing hardware-based security keys to guard against phishing and unauthorized access.
Members can use their security keys to log in and authorize critical actions, including e-commerce transactions secured by 3D Secure. This approach eliminates the need for phone numbers to access your Pliant account.
Get your Security Key:
To add a security key to your account, you must first purchase a FIDO2-compliant security key. Security keys can be connected via USB or Lightning ports, or used wirelessly via NFC. We also support creating a passkey on a phone or tablet by scanning a QR code during registration.
Ensure your key supports the FIDO2 protocol and is compatible with both the browser and device you use to access your account. For further information on browser support can be found here.
Activation of the module:
Organizations can enable Security Key Authentication through Settings > Modules. Once activated, all members can set up security keys as their authentication method.
Note: This feature is available only with a Standard subscription plan.
Add a Security Key
New account
Upon first login, members can add a security key to their account. When prompted to add an additional authentication method, choose “Security Key”. You can link a phone or tablet by scanning a code, or a USB key by plugging it in. When linking a USB key, you’ll be asked to secure it with a local biometric or PIN.
Active Account
To pair a security key with an active account, navigate to Profile Details and select “Pair Security Key.” This action will reset other multi-factor authentication methods, such as paired devices and phone numbers.
Unpair your Security Key
To unpair a security key and set up a new authentication method, go to Profile Details and click on “Unpair Security Key” under the Device Pairing section.
If you lose your security key and cannot access your account, an administrator or the organization owner can unpair the key on your behalf through the member tab in the Admin App.
Authorisation of e-commerce payments
When you add a security key to your account, your cards are automatically set up for 3DS verification via the Pliant web app. When the 3DS challenge is triggered, you will be asked to verify the transaction via a dialog displayed in the Pliant web app. To verify the transaction, press "Confirm" before the timer expires. In case the timer expires, you will need to attempt the transaction again.
