Integrating Windows WebAuthn API with Custom Credential Provider in WPF C#

Question

I've developed a Custom Credential Providers application that interacts with the Windows WebAuthn API's WebAuthNAuthenticatorGetAssertion() method for User Verification with Window Hello and External Fido2 Security Key. However, the CredentialUIBroker.exe UI fails to appear on the login page for authentication with an external FIDO2 security key or Windows Hello.

I've also created a sample WPF application to test this approach using Windows WebAuthn.dll, and it functions properly, displaying the CredentialUIBroker.exe for external security key and Windows Hello authentication, but not on the locked screen.

Register an external FIDO security key or Windows Hello from a web browser using the WebAuthn API (https://www.w3.org/TR/webauthn-2/), I utilize the navigate.credential.create() method to register users and save passkeys. Subsequently, I aim to authenticate users with my custom credential provider, written in WPF C#. However, I encounter an issue with the CredentialUIBroker.exe opening at locked screen.

I'm unable to prompt the user authenticator with the external security key and Windows Hello. Could you suggest an approach or solution to open CredentialUIBroker.exe for user authentication on the locked screen with my custom credential provider?

If it's not feasible to open the CredentialUIBroker.exe on the locked screen or if the credential provider cannot utilize Windows WebAuthn.dll, is it possible to create a custom UI in WPF C# to authenticate users with functionalities similar to WebAuthn, such as external security key and Windows Hello authentication using PublicKeyCredentialOptions? I aim to obtain responses like AuthenticatorAssertionRawResponse (including Signature, Authenticator, Userhandle, and ClientJSON) after successful authentication.

Please suggest an approach or solution that mimics WebAuthn's user authentication within a custom credential provider.

Answer 1

Hi, good day! I'm John DeV a Windows user like you and I'll be happy to assist you today.

I want to apologize that this is just a consumer forum for home users. Due to the scope of your question, it is best to ask this questions on Microsoft Site Q&A which is a technical community platform where most of the members were IT professionals that would greatly help you with the issue.

Microsoft Site Q&A

https://learn.microsoft.com/en-us/answers/quest...

Kind regards,

John DeV

Independent Advisor