I think Apple is about to open up Passkey management to device owner. This will essentially turn every Apple device kerberos type key manager. This will open up federation with a new level of authentication.

The only hitch is that one has to trust Apple as the key manager. Everyone that can get past that hurdle will be able to manage very sophisticated trust relationships.