FIDO and WebAuthn Support

The IBM Security Access Manager Advanced Access Control component provides support for FIDO and WebAuthn.

FIDO2 Server Endpoints
Endpoints provide FIDO2 clients the ability to communicate with the FIDO2 server.
Concepts
The FIDO alliance is an open industry association that produces authentication standards and certifications for password-less scenarios.
Registration
There are several user self care REST services available for managing FIDO2/WebAuthn registered authenticators.
U2F Migration
The WebAuthn specification includes backwards compatibility support for FIDO U2F.
FIDO2 Configuration
This topic provides the description of the parameters each option sets.
FIDO2 Mediation
When you are deploying FIDO2/WebAuthn it might be necessary to implement specific business controls during authentication and registration ceremonies. FIDO2 Mediators can be used to add this extra validation, as well as insert additional data into the server responses.
Authentication Service Mechanism
The WebAuthn authentication ceremony (WebAuthn Ceremonies) is integrated to the Authentication Service by using an authentication mechanism.
Limitations
There is no out-of-the-box support for registration of authenticators by using SCIM or a registration mechanism.

Parent topic: Advanced Access Control configuration