FIDO2 platform authenticator

testuser7 271

Hi,

As we know that

CTAP2 and WebAuthn define an abstraction layer that creates an ecosystem for strongly authenticated credentials. Any interoperable client (such as a native app or browser) running on a given “client device” can use a standardized method to interact with any interoperable authenticator – which could mean a platform authenticator that is built into the client device or a roaming authenticator that is connected to the client device through USB, BLE, or NFC

My question is, as per FIDO2 spec. is following possible ?

Can a platform authenticator on one client-device serve as roaming authenticator for another client device ??

So for eg., we know that iPhone's TouchID is a platform-authenticator.

I want to use it as roaming authenticator because my client device is win10 box where I have opened browser and want to complete the FIDO2 authentication using TouchID

Thanks.

Akshay-MSFT 17,771 Reputation points Microsoft Employee

2023-09-27T14:03:31.46+00:00

@testuser7

Thank you for posting your query on Microsoft Q&A, from above description I could understand that you are looking for a way where a client feature (biometric on iOS) be used as a authenticator for accessing an application on desktop browser. Where biometric on iOS device acts as platform authenticator.

Please do correct me if this is not the case by responding in the comments section.

Answer to this would be partially Yes, as you could do Passwordless sign-in with the Authenticator app.

Where you sign in using a mobile phone with fingerprint scan, facial or iris recognition, or PIN and are able sign in to work or personal account from their PC or mobile phone. But this is possible with only Authenticator app on Phone (iOS and Android devices). Ref: Choose a passwordless method

Thanks,

Akshay Kaushik

Please "Accept the answer" (Yes), and share your feedback if the suggestion answers you’re your query. This will help us and others in the community as well.
testuser7 271 Reputation points

2023-09-27T14:53:14.2766667+00:00

@Akshay-MSFT you are on wrong track.

refer this thread https://learn.microsoft.com/en-us/answers/questions/1376467/fido2-platform-authenticator to understand what I was trying to find out.

If you have more info like if you have tested practically please update that thread so we can discuss more.

Share via

FIDO2 platform authenticator

Your answer