Comment by allset_

> many applications do not support webauthn, full stop

You don't need the application to, only your IDP. Everything should be SSO from there.