Users can sign back in to the Axsy mobile app without typing their Salesforce password: with a passkey on every platform, or with Face ID or Touch ID on iPhone and iPad.
Applies to: Axsy mobile app on iOS, Android, Windows and macOS, signing in to Salesforce.
At a glance
We recommend passkeys for most organizations: they work on every platform and follow your Salesforce login policies.
Passkey sign-in | Biometric sign-in | |
|---|---|---|
Platforms | iOS, Android, Windows, macOS | iPhone and iPad only |
Unlocked with | The device's biometrics or screen lock (Face ID, Touch ID, fingerprint, face unlock, Windows Hello) | Face ID, Touch ID or the device passcode |
When it is used | Each time the user signs in to Salesforce | When the user signs back in after logging out |
Network needed | Yes, it is a full Salesforce sign-in | No Salesforce login page; uses the saved session |
Set up by | Your Salesforce admin enables passkeys; the user ticks Use Passkey | The user accepts a one-time prompt in the app |
Admin control | Salesforce login policies apply | No admin setting today |
Users per device | Any | One |
Sign in with a passkey
Passkey sign-in opens Salesforce in the device's secure system browser, where the passkey is used, then returns the user to the app signed in.
Requirements
- Passkeys are enabled for your users in your Salesforce org, or in your identity provider if you use single sign-on.
- The user has Axsy app version 10.0.2 or higher, with mobile feature set 10.1 or higher.
- The device has a network connection.
Steps
- On the Axsy login screen, tick Use Passkey.
- Tap the connection you want to sign in to.
- Salesforce opens in the system browser. Choose your passkey and confirm with your biometrics or screen lock.
- You are returned to the Axsy app, signed in.
The app remembers the Use Passkey choice, so next time you only need to tap the connection.
Security: this is a standard Salesforce OAuth sign-in with PKCE. Your org's login policies apply, and the passkey never leaves the device.
Biometric sign-in on iPhone and iPad
On iPhone and iPad, users can choose to sign back in with Face ID or Touch ID after logging out, instead of going through the Salesforce login page.
Turning it on
- Sign in to the Axsy app as normal.
- When the app asks "Do you want to use Face ID next time that you login?" (or Touch ID), tap Yes.
The app stores your Salesforce session in the iOS Keychain, protected by Face ID, Touch ID or your device passcode.
Signing in with it
- Open the Axsy app after logging out.
- Choose to sign in with Face ID or Touch ID, or tap the Login to [your username] using Face ID option on the login screen.
- Confirm with Face ID, Touch ID or your passcode. You go straight back into the app.
Removing it
- From the app: open Manage Account and tap Remove Face ID approval (or Remove Touch ID approval).
- From the login screen: choose the option to remove biometrics.
Things to know
- It is the user's choice. There is currently no admin setting to require it or turn it off.
- Only one user per device can use it.
- For users who turn it on, logging out keeps their Salesforce session on the device rather than ending it, so biometric sign-in can resume it. If your security policy requires sessions to end at logout, use passkeys instead.
- If the saved session has expired or been revoked in Salesforce, biometric sign-in fails and the user signs in normally.
Frequently asked questions
Do I need biometric sign-in if we use passkeys? No. Passkeys already use the device's biometrics on every platform. Biometric sign-in remains available on iPhone and iPad as a convenience for users who opt in.
Why don't I see the Use Passkey option? Passkey sign-in needs Axsy app version 10.0.2 or higher and mobile feature set 10.1 or higher. Update the app, and ask your admin to check which mobile feature set you are assigned.
Can admins require biometric sign-in? Not today. Biometric sign-in is turned on by each user. To control how users sign in, use your Salesforce or identity provider login policies, including passkeys.
Can two people share a device and both use biometric sign-in? No, biometric sign-in is available to one user per device. Both users can sign in with passkeys.
Is biometric sign-in available on Android or Windows? No. On those platforms, use passkeys, which work with fingerprint or face unlock on Android and Windows Hello on Windows.