> Source: [sk183428](https://support.checkpoint.com/results/sk/sk183428)

# sk183428 - SAML  passkey ID authentication for Capsule Connect/VPN 

| Property | Value |
|----------|-------|
| Solution ID | sk183428 |
| Date Created | 2025-05-06 |
| Last Modified | 2025-05-06 |
| Technical Level | General |
| Products | Endpoint Security |
| Versions | Cloud, E89.X, E88.X |
| OS | Android, iOS |

## Symptoms

- Clarification whether SAML passkeys are supported on Capsule VPN and Capsule Connect

## Cause

SAML passkeys requires WebAuthn which is a core component of FIDO2,

WebAuthn/FIDO2 is not supports Embedded Browser which is the only option for Capsule Connect/VPN apps to connect with IDP authentication (SAML) - Not supporting 'Default browser' as Endpoint Client for example.

## Solution

Embedded Browser does not support WebAuthn/FIDO2/passkeys for SAML authentication.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content