Your Guide to Passkey Authentication for Deltek Costpoint



Deltek Costpoint | Government Contracting



May 21, 2026

Deltek Vantagepoint’s contract management tools help architecture and engineering firms centralize contract documents, automate key workflows, and maintain compliance, all within a single ERP platform. The result: fewer administrative bottlenecks, stronger financial oversight, and more time focused on billable work.

Managing contracts is one of the most detail-intensive responsibilities in any architecture or engineering firm. Missed terms, misplaced documents, and manual tracking create costly delays and in project-driven environments, those delays compound fast. Deltek Vantagepoint addresses this head-on with a dedicated contract management framework built specifically for A&E firms.

What Is Contract Management in Deltek Vantagepoint?

Deltek Vantagepoint’s contract management module centralizes all contract-related activity within the same platform your team already uses for project management, accounting, and resource planning. Rather than toggling between spreadsheets, shared drives, and email chains, your team accesses every contract document, amendment, and approval in one place.

Key capabilities include:

Contract document storage: Attach and organize executed contracts, amendments, and supporting documentation directly to project records
Contract type configuration: Define contract structures, lump sum, cost-plus, time and materials—and align billing rules accordingly
Amendment tracking: Log and manage contract modifications with a clear audit trail
Compliance visibility: Monitor contract terms against actuals to flag potential overruns or scope discrepancies early

How Contract Documents Work Inside Deltek Vantagepoint

Contract documents in Deltek Vantagepoint are linked directly to project records, which means the information lives where the work happens. When a project manager needs to verify a billing cap, check a deliverable deadline, or confirm a client requirement, that information is accessible without hunting through external systems.

This tight integration between contract documents and project financials creates a direct line between what was agreed upon and what is being executed. Project managers and accounting teams work from the same source of truth, eliminating version confusion and reducing the risk of billing errors tied to outdated contract terms.

Why This Matters for Architecture and Engineering Firms

A&E firms operate across multiple contracts simultaneously, often with layered sub-consultant agreements and phased deliverables. Without a structured system, tracking contract status across a portfolio of projects becomes unmanageable.

Deltek Vantagepoint brings order to that complexity. Contract terms inform billing workflows, approval thresholds, and revenue recognition, automatically. This means your team spends less time reconciling data and more time delivering on project commitments.

The Business Value of Streamlined Contract Management

The operational benefits of Deltek Vantagepoint’s contract management tools extend well beyond document storage. Firms that structure their contracts within Vantagepoint gain:

Faster invoice cycles: Billing rules tied to contract terms reduce the back-and-forth between project managers and accounting
Stronger financial visibility: Real-time data on contract value, billed amounts, and remaining budget supports proactive decision-making
Audit readiness: A centralized document repository with version history makes internal reviews and external audits significantly more straightforward
Reduced compliance risk: Automated alerts and structured contract records help firms stay aligned with client requirements and regulatory obligations

For C-level executives and project leaders, these capabilities translate directly to improved cash flow, fewer write-offs, and greater confidence in financial reporting.

Getting the Most Out of Vantagepoint Contract Tools

Deltek Vantagepoint’s contract management features deliver the most value when they are configured to match your firm’s specific contract types, billing structures, and approval workflows. Out-of-the-box functionality provides a strong foundation, but firms that invest in proper setup, and ongoing optimization, see the clearest gains in efficiency and financial performance.

This is where working with an experienced Deltek partner makes a measurable difference. Proper configuration ensures your contract data flows accurately through project financials, reducing the manual corrections that drain time and introduce risk.

Make Contract Management Work for Your Firm

Deltek Vantagepoint gives architecture and engineering firms the tools to manage contracts with precision, transparency, and confidence. When your contract documents are integrated with your project and financial data, your entire team operates from a stronger, more reliable position.

At PCI, we help firms configure and optimize Deltek Vantagepoint to match how they actually work, so the platform supports your operations rather than complicates them. We make your operations comfortable.

Ready to see what streamlined contract management looks like for your firm? Contact PCI today to connect with a Deltek specialist.

Frequently Asked Questions

What types of contracts does Deltek Vantagepoint support?
Deltek Vantagepoint supports multiple contract types, including lump sum, time and materials, and cost-plus structures. Each type can be configured with corresponding billing rules and financial controls.

Can contract documents be attached directly to projects in Deltek Vantagepoint?
Yes. Deltek Vantagepoint allows users to attach executed contracts, amendments, and supporting documents directly to project records, keeping all relevant information in a single, accessible location.

How does Deltek Vantagepoint help with contract compliance?
Deltek Vantagepoint tracks contract terms against project actuals in real time, enabling firms to identify potential overruns or scope discrepancies before they become financial or legal issues.

Do I need a Deltek partner to set up contract management in Vantagepoint?
While basic features are accessible out of the box, working with a certified Deltek partner like PCI ensures your contract management setup is properly configured for your firm’s specific workflows, contract types, and billing structures.

Effective July 30, 2026, Deltek will discontinue its Active Directory service.

While this change may initially feel disruptive, it also creates a meaningful opportunity for government contractors to modernize how users access Deltek Costpoint, streamlining the end-user experience, strengthening security, and simplifying system access. This transition is about more than adapting to a platform update; it’s about building a more efficient and secure foundation for your operations.

To support this shift, Deltek offers two authentication options: Passkey and Single Sign-On (SSO). Understanding how each works and how they can complement one another will help you determine the best approach for your organization.

What Is Passkey?

Instead of typing a password that can be hacked or stolen, Passkey lets you verify your identity using your device. Costpoint authentication is usually done by using a device PIN. But it can also be done by using:

A fingerprint scan (Touch ID)
Face recognition (Face ID or Windows Hello)
A simple USB security key touch

In Costpoint, Passkey is used for both login authentication and digital document signing.

Why Use Passkey?

Passkey delivers meaningful benefits for your team and your organization:

No more forgotten passwords. Eliminate the hassle of password resets and account lockouts.
Stronger security. Passkey credentials cannot be guessed, phished, or stolen in a data breach.
Faster login. Authenticate in seconds using biometrics or a PIN.
Works on all your devices. Smartphones, laptops, desktops, tablets, and smartwatches are all supported.
Cross-device flexibility. Use your smartphone to authenticate when logging in on a PC or laptop.

Passkey vs. Single Sign-On (SSO) – Which Is Right for You?

Many organizations already use SAML-based Single Sign-On (SSO) to manage Costpoint access. Passkey is not a replacement for SSO; it is a complement to it. Here is how to think about your options:

Passkey Only

Best for organizations without an existing IdP, or those looking for a simpler, device-based passwordless solution. This is a particularly good fit for companies whose workforce includes employees or contractors who are not issued company email addresses, as Passkey registration can be completed without one. Authentication happens directly on the user’s registered device, eliminating the need for a central identity system while still maintaining strong security.

SSO / SAML Only

Best for organizations with an existing identity provider (IdP) that want centralized, IT-managed authentication. This option works well when all users have company email addresses, and your organization wants a single system to control and audit access. Login is managed through your IdP, such as Okta, Azure AD, or Google, giving IT full visibility into who is accessing Costpoint and when.

SSO + Passkey Together

Costpoint supports enabling both at the same time. With the Passkey (FIDO) checkbox enabled alongside SAML Single Sign-on, Passkey acts as a backup login method — particularly useful when users need to authenticate on a phone or device where SSO is not available. This is the most flexible option for organizations that want centralized SSO on laptops while still giving users passwordless access on mobile.

Important: When Passkey is used alongside SAML SSO, authentication via Passkey bypasses IdP auditing. Organizations with strict compliance or audit requirements should factor this into their decision.

How to Get Started

Step 1: Admin enables Passkey. Your system administrator configures Passkey (FIDO) for user accounts in Manage Users, ensures that the Passkey checkbox is checked under Preferences User Can Change, and sends a registration invite to the user.
Step 2: Register your device. Click the unique link in your invite email, enter the one-time passcode, and follow the prompts to complete registration.
Step 3: Log in. Enter your username and system on the Costpoint login page, then verify using your registered device.

Note: Passkey is not supported in the Costpoint TE Mobile app. Use the Costpoint Progressive Web App on smartphones instead.

Username-less Login (Kiosk Mode)

For organizations with shared workstations, Passkey supports a fully username-less and passwordless experience. Kiosk mode allows multiple users to check in from a single shared device using their own Passkey credentials.

To enable it, users navigate to the Costpoint login page using a special URL with the ?kiosk=1 parameter (e.g., https://machineA.subdomain.mycompany.com/CPWeb?kiosk=1). Clicking Log In without entering a username or password will prompt for Passkey credentials via USB key or device biometrics. Once verified, the user is logged in.

Frequently Asked Questions

Can I use Passkey alongside my current login method?

Yes. Costpoint allows Passkey to be enabled alongside your existing authentication method, including SAML Single Sign-on. In this configuration, Passkey serves as a backup login option rather than replacing your primary method.

Users are not receiving the Passkey registration link – how to resolve?

Check Junk or Spam Mail: Ensure that auto-generated emails from Deltek Cloud are not being filtered into your junk or spam folders.
Approved/Safe Email Addresses: Add the following email addresses to your approved list:
Configure SPAM Filters: Allow inbound email transmissions from the IP address 167.89.11.197, which is owned by Sendgrid.
If the items above are in place, submit a Deltek support case and ask that your email configuration be reviewed by the Cloud team.

What happens if I lose my device?

Your system administrator can remove your lost device’s Passkey from your Costpoint account in Manage Users. Once removed, that device can no longer be used to authenticate. You can then register a new device using the email invite process.

Can I register more than one device?

Yes. You can register multiple FIDO-compliant devices on your account — for example, both your work laptop and your smartphone — giving you flexibility in how you authenticate.

Does Passkey work for digital document signing as well as login?

Yes. In Costpoint, the same Passkey credential used to log in can also be used to digitally sign configured document types, such as invoices or subcontractor approvals. Your administrator sets up the document types; you simply use your Passkey to sign.

Will Passkey work on my phone’s Costpoint mobile app?

Passkey is not supported in the Costpoint TE Mobile app. If you want to use Passkey authentication on a smartphone, you will need to access Costpoint through the Progressive Web App instead.

Ready to Get Started?

Navigating technical transitions and ensuring compliance can be challenging, but PCI is here to help. With expertise in government contracting and Deltek systems, our team simplifies Passkey implementation and ensures your systems run smoothly. Our software support team handles every stage of Deltek integration, from configuration to rollout, minimizing disruptions so you can focus on your mission. Beyond technical support, PCI’s consulting services optimize your Costpoint environment to meet DCAA, CMMC, and FedRAMP requirements. We provide system reviews, strategic roadmaps, and actionable advice to turn compliance into a competitive advantage.

Experience peace of mind with PCI. Contact us today to learn how we can support your SSO transition and help you build a more secure and efficient operation.