Name Your Price
How Much Will This Cost?
With some exceptions for large companies, the answer is often pay as much as you want.
Deploy WebAuthn for little to no money, with relative ease
Paying for WebAuthn technology is a good idea
Invest in your WebAuthn deployment, for the sake of your users & technical teams!
What Do We Need to Buy?
The technology costs for WebAuthn are the SSO platform and hardware authenticators that enable users to sign in.
There are also hidden costs in operational complexity, user education & support. Appropriate spending on technology can reduce the hidden costs
The SSO Platform
If you're already using a SSO platform built for the web, the chances are you've already got WebAuthn support
Good open-source SSO platforms should support WebAuthn, for example Keycloak. You will incur some extra costs to have your own team install, run & maintain this software
The Hardware Authenticators
Using Chrome or Safari on relatively modern hardware will enable you to use your devices themselves as platform authenticators, Firefox should be adding support for this in the future. Both mobile & desktop/laptop devices can be used as platform authenticators
You will incur some extra operational complexity when users need to sign into the SSO platform from multiple devices, because the authenticator is tied to each device. This is explained in more detail within the Security & IT section
You will incur some extra operational complexity when users need to sign into the SSO platform from multiple devices, because the authenticator is tied to each device. This is explained in more detail within the Security & IT section
Cross platform authenticators are external hardware resembling a USB stick, allowing users to register the authenticator once and use it on multiple devices.
Modern versions of Yubico's well-known Yubikey can act as WebAuthn authenticators. See the Security & IT section for differences between Yubico OTP and WebAuthn.
Google also sell a viable authenticator as the Titan Security Key. These can be cheaper per unit than a Yubikey, but larger or more dispersed organizations might prefer to buy Yubikeys and use Yubico's YubiEnterprise Delivery to handle logistics.
Modern versions of Yubico's well-known Yubikey can act as WebAuthn authenticators. See the Security & IT section for differences between Yubico OTP and WebAuthn.
Google also sell a viable authenticator as the Titan Security Key. These can be cheaper per unit than a Yubikey, but larger or more dispersed organizations might prefer to buy Yubikeys and use Yubico's YubiEnterprise Delivery to handle logistics.