WebAuthn: Issue with Fido metadata?

[Mats Luspa]

Hello again!

Is it possible to configure so the authentication process falls back to 
username/password if a passkey can't be discovered? Right now passkey is 
used only if the SP requires that. But most of the SP:s at least here 
don't require passkeys and hence username/password is used. I want the 
idp to decide that passkey should be used if possible (passkey is 
discovered).

/Regards Mats

On 2024-10-30 07:24, Mats Luspa via dev wrote:
>
> You are absolutely correct. irfAuthorizedService is an ldap attribute 
> not resolved. I have now made a scripted attribute that checks if 
> irfAuthorizedService contains shibAdmin and it works now.
>
> Thanks for pointing med to the right direction :)
>
> /Regards Mats
>
> On 2024-10-29 21:35, Michael Grady via dev wrote:
>>
>>
>>> On Oct 29, 2024, at 2:46 PM, Cantor, Scott via dev 
>>> <dev at shibboleth.net> wrote:
>>>
>>>> I think it has to do with that irfAuthorizedService is a multi
>>>> -value attribute.
>>>
>>> It doesn't.
>>
>> Yes the example I supplied (and that is from a working deployment), 
>> the attribute we used could have dozens and dozens of values, so 
>> multi-valued is most definitely not the issue.
>>
>> --
>> Michael A. Grady
>> IAM Architect, Unicon, Inc.
>>
>>
>>
>>
> -- 
> --
> Mats Luspa
> Phone: +46 (0)980 79 022
> Cellular phone: +46 (0)725813330
> Institutet för rymdfysik               Fax: +46 (0)980 79 050
> Swedish Institute of Space Physics      email:matsl at irf.se
> Visiting/Delivery address: Bengt Hultqvists väg 1, SE-981 92 Kiruna
> Postal address: Box 812, SE-981 28 Kiruna
> --
> PGP Public Key:https://www.irf.se/pgp/matsl
> Digital vcard:https://www.irf.se/vcard/mats.luspa
>
-- 
--
Mats Luspa
Phone: +46 (0)980 79 022
Cellular phone: +46 (0)725813330
Institutet för rymdfysik               Fax: +46 (0)980 79 050
Swedish Institute of Space Physics      email:matsl at irf.se
Visiting/Delivery address: Bengt Hultqvists väg 1, SE-981 92 Kiruna
Postal address: Box 812, SE-981 28 Kiruna
--
PGP Public Key:https://www.irf.se/pgp/matsl
Digital vcard:https://www.irf.se/vcard/mats.luspa

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20241030/86eda790/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5037 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/dev/attachments/20241030/86eda790/attachment.p7s>