FIDO and WebAuthn Support

The IBM Security Verify Access Advanced Access Control component provides support for FIDO and WebAuthn.

FIDO2 Server Endpoints
Endpoints provide FIDO2 clients the ability to communicate with the FIDO2 server.
Concepts
The FIDO alliance is an open industry association that produces authentication standards and certifications for password-less scenarios.
Registration
There are several user self care REST services available for managing FIDO2/WebAuthn registered authenticators.
U2F Migration
The WebAuthn specification includes backwards compatibility support for FIDO U2F.
FIDO2 Configuration
This topic provides the description of the parameters each option sets.
FIDO2 Mediation
When you are deploying FIDO2/WebAuthn it might be necessary to implement specific business controls during authentication and registration ceremonies. FIDO2 Mediators can be used to add this extra validation, as well as insert additional data into the server responses.
FIDO Client Manager
A FIDO2 Client Manager is added to the default variables that are available in an InfoMap authentication mechanism. The FIDO2 Client manager allows administrators to make FIDO2 attestation and assertion requests without using a HTTP client.
Authentication Service Mechanism
The WebAuthn authentication ceremony (WebAuthn Ceremonies) is integrated to the Authentication Service by using an authentication mechanism.
Limitations
There is no out-of-the-box support for registration of authenticators by using SCIM or a registration mechanism.

Parent topic: Advanced Access Control configuration