Important Notice
[2026-07-22] Unlock Your Creativity: Adobe Creative Cloud Available to All HKBU Staff (Staff Only)
[2026-08-18] Service Maintenance: BUniPort (Staff & Student)
[2026-08-24] Scheduled Maintenance: Human Capital Management (HCM) System (Staff Only)
PASSWORDLESS / BIOMETRIC SINGLE-SIGN-ON (SSO) AUTHENTICATION
Overview
Passwordless/Biometric Single-Sign-On Authentication (The Passwordless SSO) provides a more convenient and secure way for accessing the IT services and sensitive/personal data using biometrics, such as your fingerprint or facial landmarks, instead of using a password. Passwordless SSO offers a simpler, faster, and seamless login experience by eliminating the risk of password-related security breaches and the inconvenience of managing complex passwords across multiple devices.
All staff members, students and university associates are eligible to activate Passwordless SSO for their digital identity (SSOid) via the Passwordless Activation Page or the HKBU Mobile App.
Why Passwordless/Biometric SSO Authentication?
Enhanced Security
Passwordless SSO eliminates passwords, which are often vulnerable to attacks, and provides a more secure defence against unauthorised access to your data.
Simplified 3-Step Passwordless QR Code Sign-On
No need to remember/enter your complex password. A Cross-platform and Universal 3-step sign-on using the Security Passkey registered on your mobile phone: (1) Enter Username, (2) Scan QR Code, and (3) Verify your identity with Biometrics.
Seamless Experience
With the Passwordless SSO feature enabled, the DUO Mobile App continues to provide a consistent, seamless login experience for accessing University IT services.
Steps to enable Passwordless/Biometric Single-Sign-On (SSO) Authentication for your SSOid:
Check Pre-requisite (for NEW students and staff only):
Visit the Multi-factor Authentication (MFA) webpage to complete the DUO MFA Registration.
Activate Passwordless/Biometric SSO Authentication:
Visit the Passwordless/Biometric SSO activation page and follow the onscreen instructions; OR
Tap ‘Settings’ → ‘Passwordless Management’ on your HKBU Mobile App to activate this feature.
Create and register a "roaming" Security Passkey on your mobile device:
After receiving the email confirmation for Passwordless/ Biometric SSO Activation, follow the User Guides to register/create a Security Passkey for your digital identity via the “DUO Self-Service Portal” to enjoy the “3-Step Passwordless QR Code Sign-On”
Supported Browsers
Please click here to check the latest passwordless-supported browsers.
Terms and Conditions for Passwordless/Biometric Single-Sign-On (SSO) Authentication
Please click here for details.
To activate Passwordless/Biometric SSO Authentication for SSOid, please visit the Activate Passwordless/Biometric Single-Sign-On (SSO) Authentication webpage or Activate Passwordless using HKBU Mobile
All HKBU staff, students and associates with active SSOid account are eligible to use Passwordless/Biometric SSO Authentication. Departmental/Project accounts and Student Organisation/Society accounts can use Passwordless authentication by using roaming Security Passkey.
Please refer to the user guides based on your devices’ Operating Systems.
Please refer to the user guide [Register your Phone as a universal Security Passkey].
Please refer to the user guide [Remove Your Registered Device].
Please refer to the user guide [Rename Your Registered Device]
You may log in to the service by using one of the following methods:
You can select "Other Option" and opt to log in using your Password and Bypass Code instead. Please refer to [Sign-On Using Password on public (non-personal/non-university-owned) computers] for details.
If you have not yet Registered Your Phone as a Roaming Security Passkey, you must Register Individual Devices for Passwordless SSO through the DUO Self-Service Portal. Otherwise, a 6-digit one-time verification code will be prompted when logging in the IT services.
For maximum convenience, we highly recommend users register their phone as a Roaming Security Passkey. This avoids the need to register individual devices for Passwordless SSO.
It is important to note that a Roaming Security Passkey is the only option that allows multiple users to go passwordless when sharing a common departmental, project, or student organisation account.
We are continuously expanding the service by increasing the number of website / applications supported by Passwordless. Our extensive launch already supports over 190 applications. Key supported applications include:
- 70th Photo Archive Website
- BUHub (New Platform)
- BU News
- BU Moodle
- Departmental Website/ Application/ System Repository
- GenAI Platform
- HKBU Library Website
- Human Capital Management (HCM)
- IMS - Intelligent Management System
- ITSM - Service Now