Shibboleth WebAuthn Plugin V0.9.0 Release Candidate 3 now available

[Philip Smart]

The Shibboleth project is happy to announce the third release candidate of the WebAuthn plugin [1]. This is expected to be the final release candidate.


The third release candidate includes three enhancements:

1. An extensible policy engine for accepting and rejecting credentials based on the authenticator that created them [2].

2. An extensible policy engine for accepting and rejecting credentials during authentication [3].

3. UI support for labelling authenticators and credentials e.g. 'a passkey' [4].


As usual, you can now find the appropriate version for download by checking the project's Status page [5]. As this is a release candidate and not a production release, please review the installation instructions on the Plugin Testing Wiki page [6].


Note that the release candidate plugin is intended solely for testing and should not be used in a production environment. Testers are encouraged to provide feedback and report any bugs on the project's issues page [7].


Phil on behalf of the team


[1] https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3395321933/WebAuthnAuthnConfiguration


[2] https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3879206915/WebAuthnRegistration#Credential-Registration-Policies


[3] https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3878256667/WebAuthnAuthentication#Authentication-Credential-Policies


[4] https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3879206915/WebAuthnRegistration#Labelling-Credentials


[5] https://shibboleth.net/cgi-bin/projstatus.cgi


[6] https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3256057857/Plugin+Testing


[7] https://shibboleth.atlassian.net/jira/software/c/projects/JWEBAUTHN/issues



Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under company number. 05747339, VAT number GB 197 0632 86. Jisc's registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


Jisc Commercial Limited is a wholly owned Jisc subsidiary and a company limited by shares which is registered in England under company number 09316933, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20241120/c1c372c6/attachment.htm>