Configuration Guide
Configuration Guide
Breadcrumbs

Webauthn Device Management Widget

Definition

The Webauthn Device Management widget is used to manage the available device enrolled using Webauthn. They can be renamed/deleted.

It is a standalone widget that requires a host feature of type "self" or an object feature where the object is the current subject.

Typically used in a UI_FOR_OBJECT feature of type "self".

The user is presented with a list of available device which can be renamed or deleted.

image-20220928-091815.png


Configuration

Tenant properties

The BUM service communicates with the Credential Gateway Service to list/update/delete the devices. The location and system account used to access this service must be configured as tenant properties (not settings).

Property name

Type

Description

citadel.bum.cgw.tenants.<tenant>.backendBaseUrl

String

The base URL of the CGW backend service.

citadel.bum.cgw.tenants.<tenant>.login

String

The login of the system account who will authenticate through basic auth on the CGW backend to perform CRUD operation

citadel.bum.cgw.tenants.<tenant>.password

String

The password of the system account who will authenticate through basic auth on the CGW backend to perform CRUD operation

Widget properties

When the widget is placed in a non-self feature it can manage the web authentication keys of any users in the scope of the feature. These features should hence be reserved for admin purpose.

Properties

Property name

Type

Description

Values (default value in bold)

canDeleteDevices

Boolean

The user is allowed to rename the device

true, false

canRenameDevices

Boolean

The user is allowed to delete the device

true, false

canEnableDevices

Boolean

The user can enable/disable the device (soft delete)

true, false

Example 

<widget id="webauthn-devices-management-widget" xsi:type="ctdbum:WebauthnDevicesManagementWidgetType">
    <hidden>false</hidden>
    <displayOptions>
        <modalSize>SM</modalSize>
    </displayOptions>
    <config>
        <bordered>false</bordered>
        <title>true</title>
        <canDeleteDevices>true</canDeleteDevices>
        <canRenameDevices>true</canRenameDevices>
	    <canEnableDevices>true</canRenameDevices>
    </config>
</widget>