No subject

[Equbay Kiflay]

Good day,
I  tested the WebAuthn plugin and this is what I got so far.

*My test environment* is
  OS: Debian 12 (ver. 12.8)
  IdP:  5.1.3
  WebAuthn plugin: 0.9.0
  other installed plugins:  storage.jdbc 2.0.1, nashorn 2.0.0 and  fudiscr
2.1.0

*Set up*
WebAuthn as the sole factor but with password fallback for registration

*Result*
I was able to register a Hyper Fido Pro key (which is FIDO 2 compliant) and
a google authenticator on phone for a user. However, I was not able to
login with the registered keys later.

For the Fido key windows says the key can not be used (the same key can be
used with privacyIDEA as a second factor on a server with the exact same
environment without problem).

For the google authenticator, Shibboleth says to check the device but
nothing comes on the phone.

I also tried Microsoft Authenticator on iPhone. But I can not register. The
Authenticator saying it does not support this passkey.

I don't know what kind of device can be used.

Regards,

-- 

Equbay Kiflay <equbay.kiflay at concordia.ab.ca>

IT Operations Coordinator

Information Technology Services

Toll-Free: +1 866 479 5200

<https://concordia.ab.ca/>

[image: Concordia University of Edmonton] <https://concordia.ab.ca/>

concordia.ab.ca


[image: Concordia University of Edmonton Twitter]
<https://twitter.com/CUEdmonton> [image: Concordia University of Edmonton
Instagram] <https://instagram.com/cuedmonton/> [image: Concordia University
of Edmonton Facebook] <https://facebook.com/CUEdmonton>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20241204/4af71958/attachment.htm>