WebAuthn plugin v1.4.0 now available

[Philip Smart]

The Shibboleth Project has released v1.4.0 of the WebAuthn authentication plugin (see release notes at [1] and documentation at [2])

This release features a small number of bug fixes as well as the introduction of a new feature. Significantly, the consent revocation feature, missing until now, has been added to the main WebAuthn template and flow logic. Additionally, a predicate can now be injected to signal the registration view to automatically trigger the creation of a new credential upon page load, eliminating the need for user interaction [3].

— Phil Smart, on behalf of the team

[1] https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3394928781/WebAuthnReleaseNotes
[2] https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3395321933/WebAuthnAuthnConfiguration
[3] https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3879206915/WebAuthnRegistration


Jisc is a registered charity (in England and Wales under charity number 1149740; in Scotland under charity number SC053607) and a company limited by guarantee registered in England under company number 05747339, VAT number GB 197 0632 86. Jisc's registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/announce/attachments/20251007/ce3fb398/attachment.htm>