---
realm: ccchh
alias: passkey and 2FA
description: Login flow with passkey and proper 2FA handling.
providerId: basic-flow
authenticationExecutions:
  - subFlow: pk2fa-login
    requirement: REQUIRED
    authenticationExecutions:
      - providerId: auth-cookie
        requirement: ALTERNATIVE
      - subFlow: pk2fa-authentication
        requirement: ALTERNATIVE
        authenticationExecutions:
          - providerId: auth-username-password-form
            requirement: REQUIRED
          - subFlow: pk2fa-conditional-2fa
            requirement: CONDITIONAL
            authenticationExecutions:
              - providerId: conditional-credential
                requirement: REQUIRED
                authenticationConfig:
                  alias: pk2fa-conditional-2fa-passwordless-conditional
                  config:
                    credentials: webauthn-passwordless
              - providerId: conditional-user-configured
                requirement: REQUIRED
              - providerId: webauthn-authenticator
                requirement: ALTERNATIVE
              - providerId: auth-otp-form
                requirement: ALTERNATIVE