docs: consolidate passkey docs and add embedded enrollment guide#1220
Open
tomauth0 wants to merge 1 commit into
Open
docs: consolidate passkey docs and add embedded enrollment guide#1220tomauth0 wants to merge 1 commit into
tomauth0 wants to merge 1 commit into
Conversation
- Merge native-passkeys-api.mdx and native-passkeys-for-mobile-applications.mdx
into passkey-apis.mdx ("Passkey APIs for Embedded Applications").
Cover iOS, Android, and web with platform-specific tabs for client-side
credential APIs; defer parameter reference to the My Account API
explorer instead of duplicating tables.
- Correct app-association guidance: Auth0 hosts apple-app-site-association
and assetlinks.json automatically based on Device Settings; developers
do not host these files themselves.
- Rewrite cross-platform guidance: synced credentials handle the common
case (no QR code needed); hybrid transport is a fallback for
cross-ecosystem or shared-device scenarios only. Avoid setting rpId
at the eTLD+1; prefer a parent subdomain scoped to auth surfaces.
- Add new Embedded Login Enrollment use case
(authenticate/login/embedded-login/use-cases/enrollment.mdx) covering
MFA factor enrollment, passkey enrollment, connected accounts, and
self-service authentication method management.
- Update embedded-login.mdx capabilities to mention native social login
and broaden passkey support to web + iOS + Android.
- Remove Early Access warnings from Passkey APIs and My Account API
pages now that they are GA.
- Add redirects from old passkey URLs to the consolidated page; update
inbound links in passkeys.mdx, passwordless.mdx, my-account-api.mdx,
and api/myaccount.mdx.
Note: fr-ca and ja-jp translations still reference the old structure
and need a follow-up translation pass.
hazel-nut
reviewed
May 19, 2026
Contributor
hazel-nut
left a comment
There was a problem hiding this comment.
looks like you have some merge conflicts and unverified commits you'll need to fix, and you'll need to add redirects for the pages you're deleting. 🙂 happy to review more fully for content afterwards!
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Merge native-passkeys-api.mdx and native-passkeys-for-mobile-applications.mdx into passkey-apis.mdx ("Passkey APIs for Embedded Applications"). Cover iOS, Android, and web with platform-specific tabs for client-side credential APIs; defer parameter reference to the My Account API explorer instead of duplicating tables.
Correct app-association guidance: Auth0 hosts apple-app-site-association and assetlinks.json automatically based on Device Settings; developers do not host these files themselves.
Rewrite cross-platform guidance: synced credentials handle the common case (no QR code needed); hybrid transport is a fallback for cross-ecosystem or shared-device scenarios only. Avoid setting rpId at the eTLD+1; prefer a parent subdomain scoped to auth surfaces.
Add new Embedded Login Enrollment use case (authenticate/login/embedded-login/use-cases/enrollment.mdx) covering MFA factor enrollment, passkey enrollment, connected accounts, and self-service authentication method management.
Update embedded-login.mdx capabilities to mention native social login and broaden passkey support to web + iOS + Android.
Remove Early Access warnings from Passkey APIs and My Account API pages now that they are GA.
Add redirects from old passkey URLs to the consolidated page; update inbound links in passkeys.mdx, passwordless.mdx, my-account-api.mdx, and api/myaccount.mdx.
Description
References
Testing
Checklist
CONTRIBUTING.md.