Secure Connect uses Beyond Identity to provide passkey login at Cornell. Instead of using your NetID and password to access a web-based service, with Secure Connect you will use your biometrics to unlock a passkey stored on your device. It's another way to reduce the chances that someone can steal Cornell data or change your personal information on Cornell’s systems.

The passkey is a unique credential associated with your Cornell NetID. The passkey, not your biometrics, is how you’re granted access. Beyond Identity enables your computer to confirm that the person who used their fingerprint or face to try to log in is you and not an impostor.

Traditional password authentication with Two-Step Login (Duo) is still available.

If you see this message on the CUWebLogin screen, you can enroll.