Fido2-nycklar är fantastiska, enkla att ha å göra med, och kanske ett bra komplement när användning av TOTP går ur tiden under nästa år?

Vi fick Passkey-stöd (nästan) på köpet genom Fido2, så det kanske kan vara värt att utforska i samma veva.

-- eduID genom Zacharias

On Thu, 5 Dec 2024 at 20:19, Pål Axelsson via Saml-admins <saml-admins@lists.sunet.se> wrote:
Hej,

Nu har en plugin som jag väntat på något år på, en WebAuthn plugin till Shibboleth IdP. Pluginen gör att det är mäjligt att använda fido2nycklar tillsammans med Shibboleth. Det finns flera andra lösningar men denna kommer från konsortiet.

Om det finns ett intresse att utforska denna för flera i SWAMID föreslår jag en gemensam arbetsgrupp som tittar på denna plugin. Svara gärna på detta brev om ni är intresserade.

Pål


---------- Forwarded message ---------
Från: Philip Smart via announce <announce@shibboleth.net>
Date: tors 5 dec. 2024 20:04
Subject: WebAuthn authentication plugin v1.0.0 now available
To: announce@shibboleth.net <announce@shibboleth.net>


The Shibboleth Project is pleased to announce the first release of the WebAuthn authentication plugin (see the documentation at [1])

The WebAuthn login flow facilitates FIDO2 authentication within the Identity Provider (IdP) by utilizing the Web Authentication API. This enables strong, public-key-based authentication. The plugin can operate in various ways: as a single-factor within a broader multi-factor authentication, as passwordless authentication after the user enters their username, or as usernameless authentication where the user is implicitly identified from the authentication credential they choose.

Thank you once again to everyone who provided feedback on the beta and release candidates.

-- Phil Smart, on behalf of the team

[1] https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3395321933/WebAuthnAuthnConfiguration

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under company number. 05747339, VAT number GB 197 0632 86. Jisc’s registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


Jisc Commercial Limited is a wholly owned Jisc subsidiary and a company limited by shares which is registered in England under company number 09316933, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice
--
To unsubscribe from this list send an email to announce-unsubscribe@shibboleth.net
_______________________________________________
Saml-admins mailing list -- saml-admins@lists.sunet.se
To unsubscribe send an email to saml-admins-leave@lists.sunet.se