Implement an authentication and access management solution

A newly hired remote user has no registered authentication methods and must not be given a password. On the first day, the user must sign in and register a passkey. What should you use?