WebAuthn | Memority Documentation

Definition

WebAuthn configuration allows to define which authenticator type will be allowed for WebAuthn authentication.

🎯

You can access the WebAuthn configuration :

by clicking on "Authentication" → “WebAuthn”
by clicking on "System" → "Configurations" → "Access Service" and perform an import/export.

Property name	Type	Mandatory	Description	Values (default value in bold)
authenticatorType	`Enum`	NO	Specify the authenticators type that could be registered.	PLATFORM: Restrict the authenticators to platform tied mechanisms, such as Windows Hello on Windows station. CROSS_PLATFORM: Restrict the authenticators to cross-platform devices, such as portable FIDO stick (like Yubikey). ALL: No specific authenticators restriction, the user's system is free to propose options such as Windows Hello or FIDO usb keys in any order.

Property name

Type

Mandatory

Description

Values (default value in bold)

authenticatorType

Enum

Specify the authenticators type that could be registered.

PLATFORM: Restrict the authenticators to platform tied mechanisms, such as Windows Hello on Windows station.

CROSS_PLATFORM: Restrict the authenticators to cross-platform devices, such as portable FIDO stick (like Yubikey).

ALL: No specific authenticators restriction, the user's system is free to propose options such as Windows Hello or FIDO usb keys in any order.

XML

   <maiaamcp:WebAuthnConfiguration>
      <authenticatorType>ALL</authenticatorType>
   </maiaamcp:WebAuthnConfiguration>