ory · hperl · Jul 12, 2026 · Jul 12, 2026 · Jul 12, 2026 · Jul 12, 2026
@@ -140,5 +140,5 @@ Using the Ory Tunnel has two key limitations currently.
 - Your local machine is usually available on both `localhost` and `127.0.0.1`. For the browser these two domains are different
   domains. Cookies set on `localhost` will not be sent in requests to `127.0.0.1` and vice versa. If you encounter cookie issues,
   make sure that all of your requests are sent to `localhost` and not `127.0.0.1`.
-- [WebAuthn](../kratos/mfa/webauthn-fido-yubikey) does not support cross-domain use currently. We are working together with the
-  [W3C to figure out solutions](https://github.com/w3c/webauthn/issues/1372).
+- <SameDeploymentLink to="kratos/mfa/webauthn-fido-yubikey">WebAuthn</SameDeploymentLink> does not support cross-domain use currently.
+  We are working together with the [W3C to figure out solutions](https://github.com/w3c/webauthn/issues/1372).
@@ -30,8 +30,8 @@ Ory Identities (Kratos) doesn't natively support Duo. You integrate it with an O
 4. Your handler waits for the response: long-poll for push, synchronous for OTP.
 5. When Duo allows, you return success. When Duo denies, you block the sign-in.
 
-For most use cases, [native WebAuthn MFA](../../kratos/mfa/20_webauthn-fido-yubikey.mdx) is the simpler path with equivalent or
-better security.
+For most use cases, <SameDeploymentLink to="kratos/mfa/webauthn-fido-yubikey">native WebAuthn MFA</SameDeploymentLink> is the
+simpler path with equivalent or better security.
 
 ## Notable
 

@@ -29,8 +29,8 @@ You add an Ory Action on `login.after` with `can_interrupt: true`:
 4. Your handler polls Okta for the result.
 5. On `SUCCESS` you return success. On `REJECTED` or timeout, you block the sign-in.
 
-For most use cases, native [WebAuthn MFA](../../kratos/mfa/20_webauthn-fido-yubikey.mdx) or TOTP is simpler. Okta Verify makes
-sense primarily when it's already deployed across the workforce.
+For most use cases, native <SameDeploymentLink to="kratos/mfa/webauthn-fido-yubikey">WebAuthn MFA</SameDeploymentLink> or TOTP is
+simpler. Okta Verify makes sense primarily when it's already deployed across the workforce.
 
 ## Notable
 

@@ -7,15 +7,15 @@ sidebar_label: YubiKey
 ---
 
 <head>
-  <link rel="canonical" href="https://www.ory.com/docs/kratos/mfa/webauthn-fido-yubikey" />
+  <link rel="canonical" href="https://www.ory.com/docs/network/kratos/mfa/webauthn-fido-yubikey" />
 </head>
 
 ```mdx-code-block
 import Admonition from '@theme/Admonition'
 
 <Admonition type="info" title="Primary documentation">
 This page is a short overview; YubiKey support is built in via WebAuthn / FIDO2. See
-[Multi-factor authentication with WebAuthn](../../kratos/mfa/20_webauthn-fido-yubikey.mdx) for the full guide.
+<SameDeploymentLink to="kratos/mfa/webauthn-fido-yubikey">Multi-factor authentication with WebAuthn</SameDeploymentLink> for the full guide.
 </Admonition>
 ```
 

@@ -64,7 +64,8 @@ To learn more about the verification flow, read
 When you enable the one-time code method the login flow will need to send out an email to users signing in through the one-time
 code method. The system will then use the `login_code.valid` template to send the login code to the user.
 
-To learn more about login via a one-time code, read the [one-time code](../passwordless/07_code.mdx) documentation.
+To learn more about login via a one-time code, read the <SameDeploymentLink to="kratos/passwordless/one-time-code">one-time
+code</SameDeploymentLink> documentation.
 
 ```mdx-code-block
 </TabItem>
@@ -75,7 +76,8 @@ To learn more about login via a one-time code, read the [one-time code](../passw
 When you enable the one-time code method the registration flow will need to send out an email to users signing up using the
 one-time code method. The system will then use the `registration_code.valid` template to send the registration code to the user.
 
-To learn more about registration via a one-time code, read the [one-time code](../passwordless/07_code.mdx) documentation.
+To learn more about registration via a one-time code, read the <SameDeploymentLink to="kratos/passwordless/one-time-code">one-time
+code</SameDeploymentLink> documentation.
 
 ```mdx-code-block
 </TabItem>

@@ -713,7 +713,7 @@ We need to set up secure keys and run Ory Kratos in production mode:
 
 - Fork the [Ory Kratos Node.js UI Reference](https://github.com/ory/kratos-selfservice-ui-node) or
   [build a custom UI in the language of your choice](../sdk/01_overview.md).
-- [Add Two Factor Authentication (2FA) to your App](../mfa/01_overview.mdx)
+- <SameDeploymentLink to="kratos/mfa-overview">Add Two Factor Authentication (2FA) to your App</SameDeploymentLink>
 - [Configure The Password Policy](../../concepts/password-policy.mdx)
 - [Integrate using webhooks](../hooks/01_configure-hooks.mdx)
 - Review the [Landlock filesystem sandbox](../../security-compliance/landlock-sandbox.mdx) — Ory Network and OEL binaries restrict

@@ -24,4 +24,4 @@ Head to [our blogpost](https://www.ory.com/choose-recommended-argon2-parameters-
 how this command and password checking in Ory Kratos works.
 
 If you encounter any problems like timeouts or out-of-memory errors, consolidate our
-[troubleshooting guide](../debug/performance-out-of-memory-password-hashing-argon2.md).
+[troubleshooting guide](/docs/oel/kratos/debug/performance-out-of-memory-password-hashing-argon2).