Authentication is transitioning from passwords and two factor authentication to passkeys; while passkeys address better authentication, it does not provide verified user information. Identity federation remains a critical part of this ecosystem, providing verified user information to the RPs in addition to safe authentication. In this session, we'll discuss best practices for identity and authentication strategies, including both passkeys and identity federation. We'll also discuss the impact of third-party cookie restriction, the mitigation and additional capabilities.