This new industry standard enables end users to logon to (web) apps using a passkey that is stored securely on their devices (ie. smartphone, tablet, etc.).

Advantages:

- No password (manager) is required 

- No 2-factor authentication is required by the identity provider

- More secure: the private key (passkey) is securely stored on selected devices and is not stored on the server. Also, phishing attempts are not possible using the mechanism.

APEX should introduce a new authentication scheme to support Webauthn. This authentication scheme would be able to interact with identity providers that support Webauthn (like Azure Active Directory).