pilot

`Payment Passkey` {#tms-passkey-intro}
======================================

`Payment Passkey` is an e-commerce authentication solution that is built on Fast Identity Online (FIDO). `Payment Passkey` uses device-based authentication to provide a consistent and secure payment experience. `Payment Passkey` provides a streamlined customer experience and enhances security by standardizing local authentication. `Payment Passkey` also offers eligibility for liability shift under the digital authentication framework.  
A `Payment Passkey` credential is assigned to a device and card combination after a successful cardholder authentication. You can use this `Payment Passkey` credential during cardholder checkout when the same device and payment card are used. This avoids repeated calls to the issuer and optimizes the cardholder's payment experience.

> IMPORTANT This feature is in the pilot phase. You have early access to this feature even though it might contain bugs or unfinished work. You should consider the risk when using this feature.

`Payment Passkey` Workflow {#tms-passkey-intro_section-workflow}
----------------------------------------------------------------

This workflow illustrates the process of integrating to Passkey Service and binding a network token to a device or browser. There are three possible outcomes when you send a request to determine if FIDO authentication is available for a network token:

* `AUTHENTICATE`: The device and network token combination is already registered with `Payment Passkey` and enrollment and step-up are not required. The cardholder can authenticate immediately using their passkey. See [Authenticate with Passkey](/docs/cybs/en-us/tms/developer/all/rest/tms/tms-passkey-intro/tms-net-tkn-card-authenticate.md "").
* `AUTHENTICATION_REGISTRATION`: No `Payment Passkey` exists yet for the device and tokenized card combination and the device and token are eligible to be registered with `Payment Passkey`. You must register a passkey before authentication can take place. See [Register a Passkey and Authenticate](/docs/cybs/en-us/tms/developer/all/rest/tms/tms-passkey-intro/tms-net-tkn-card-registration.md "").
* `STEP_UP_AUTHENTICATION`: The device and tokenized card is not yet registered with `Payment Passkey` and the issuer has challenged the device binding. You must complete an issuer‑required step‑up authentication before the device can be approved and passkey registration can proceed. See [Step-up Authentication for Registration](/docs/cybs/en-us/tms/developer/all/rest/tms/tms-passkey-intro/tms-net-tkn-card-stepup.md "").

#### Figure: {#tms-passkey-intro_fig}

`Payment Passkey` Workflow ![](/content/dam/documentation/cybs/en-us/topics/payments-processing/payment-services/tms/images/tms-vpp-1030x1000.svg/jcr:content/renditions/original)