> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lerian.studio/llms.txt
> Use this file to discover all available pages before exploring further.

# Get passkey policy

> Says whether your organization offers passkey sign-in, and whether it signs in through an SSO provider.

The option belongs to the organization resolved from your token; nothing in the request names another one. Passkeys and SSO exclude each other: passkeys cannot be turned on while an SSO provider is active, and an SSO provider cannot be configured while passkeys are on.

While passkeys are on, a person who has a passkey cannot sign in with a password (403 AUT-1019 on the password grant); everyone else signs in with password and second factor as before. Turning passkeys off lets everyone sign in with a password again; passkeys stay stored.

Read-only: nothing changes.

Failures:
- `404` — the application backing your organization's login was not found.
- `503 IDE-0066` — the identity provider is unavailable (unreachable, too slow to answer, or failing). Nothing about the request was wrong; retry it later.



## OpenAPI

````yaml /pt/openapi/v3-current/AM-identity.yaml get /v1/passkey/policy
openapi: 3.1.0
info:
  contact:
    name: Lerian Studio
    url: https://lerian.studio
  description: OpenAPI 3.1 surface for the Access Manager identity component.
  license:
    name: Lerian Studio General License
  title: Plugin Access Manager — Identity API
  version: v1
servers:
  - url: https://identity.sandbox.lerian.net
security: []
tags:
  - description: >-
      M2M-only: each plugin declares its own permissions, roles and M2M
      contract, and the server reconciles them.
    name: Declarations
  - description: >-
      A tenant administrator's customers. Each partner holds what its
      credentials may DO (permissions, per product) and WHERE they may do it
      (scope, per product and dimension); an M2M application attached to one is
      confined to that intersection. Administrator-only: authorized on the
      "partners" resource, and every route resolves the owning organization from
      the caller's token.
    name: Partners
paths:
  /v1/passkey/policy:
    get:
      tags:
        - Passkey
      summary: Get passkey policy
      description: >-
        Says whether your organization offers passkey sign-in, and whether it
        signs in through an SSO provider.


        The option belongs to the organization resolved from your token; nothing
        in the request names another one. Passkeys and SSO exclude each other:
        passkeys cannot be turned on while an SSO provider is active, and an SSO
        provider cannot be configured while passkeys are on.


        While passkeys are on, a person who has a passkey cannot sign in with a
        password (403 AUT-1019 on the password grant); everyone else signs in
        with password and second factor as before. Turning passkeys off lets
        everyone sign in with a password again; passkeys stay stored.


        Read-only: nothing changes.


        Failures:

        - `404` — the application backing your organization's login was not
        found.

        - `503 IDE-0066` — the identity provider is unavailable (unreachable,
        too slow to answer, or failing). Nothing about the request was wrong;
        retry it later.
      operationId: getPasskeyPolicy
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PasskeyPolicyResponse'
          description: OK
        '401':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPError'
          description: Unauthorized
        '403':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPError'
          description: Forbidden
        '404':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPError'
          description: Not Found
        '500':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPError'
          description: Internal Server Error
        '503':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPError'
          description: Service Unavailable
      security:
        - BearerAuth: []
components:
  schemas:
    PasskeyPolicyResponse:
      additionalProperties: false
      properties:
        enabled:
          description: >-
            True when the organization offers passkey sign-in. While it is true,
            a person who has a passkey cannot sign in with a password.
          examples:
            - true
          type: boolean
        ssoActive:
          description: >-
            True when the organization signs in through an SSO provider.
            Passkeys cannot be turned on while it is true.
          examples:
            - false
          type: boolean
      type: object
    HTTPError:
      additionalProperties: false
      properties:
        code:
          type: string
        entityType:
          type: string
        err: {}
        message:
          type: string
        title:
          type: string
      type: object
  securitySchemes:
    BearerAuth:
      bearerFormat: JWT
      description: JWT bearer token issued by the identity provider.
      scheme: bearer
      type: http

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.