WebAuthn / FIDO 2 Demo - Revision history

Jeff.Krug at 22:14, 21 February 2022

2022-02-21T22:14:05Z

← Older revision		Revision as of 22:14, 21 February 2022
Line 41:		Line 41:

	The first time you do this, you will need to type in 'testuser01' again. And then when you click continue, your device will take over to unlock your webauthn / FIDO2 key. After you authenticate to your device, your device will authenticate to the IDP and you should be redirected to the NIEF Test SP where you will see a page that looks like the following:		The first time you do this, you will need to type in 'testuser01' again. And then when you click continue, your device will take over to unlock your webauthn / FIDO2 key. After you authenticate to your device, your device will authenticate to the IDP and you should be redirected to the NIEF Test SP where you will see a page that looks like the following:

			[[File:sso.png\|center\|Screen shot of the NIEF Test SP - SSO landing page and attribute review page.]]

Jeff.Krug: /* Test SSO */

2022-02-21T22:13:14Z

Test SSO

← Older revision		Revision as of 22:13, 21 February 2022
Line 39:		Line 39:
	== Test SSO ==		== Test SSO ==
	The final step is to actually authenticate to the IDP using the WebAuthn credential. Test this with the following link [https://assure.ref.gfipm.net/idp/profile/SAML2/Unsolicited/SSO?providerId=https%3A%2F%2Ftestsp.nief.org%2Fshibboleth&target=https%3A%2F%2Ftestsp.nief.org%2Fprot Login to NIEF Test SP]		The final step is to actually authenticate to the IDP using the WebAuthn credential. Test this with the following link [https://assure.ref.gfipm.net/idp/profile/SAML2/Unsolicited/SSO?providerId=https%3A%2F%2Ftestsp.nief.org%2Fshibboleth&target=https%3A%2F%2Ftestsp.nief.org%2Fprot Login to NIEF Test SP]

			The first time you do this, you will need to type in 'testuser01' again. And then when you click continue, your device will take over to unlock your webauthn / FIDO2 key. After you authenticate to your device, your device will authenticate to the IDP and you should be redirected to the NIEF Test SP where you will see a page that looks like the following:

Jeff.Krug: /* IDP Confirmation */

2022-02-21T22:05:41Z

IDP Confirmation

← Older revision		Revision as of 22:05, 21 February 2022
Line 36:		Line 36:

	[[File:fail.png\|center\|Screen shot of failed registration.]]		[[File:fail.png\|center\|Screen shot of failed registration.]]

			== Test SSO ==
			The final step is to actually authenticate to the IDP using the WebAuthn credential. Test this with the following link [https://assure.ref.gfipm.net/idp/profile/SAML2/Unsolicited/SSO?providerId=https%3A%2F%2Ftestsp.nief.org%2Fshibboleth&target=https%3A%2F%2Ftestsp.nief.org%2Fprot Login to NIEF Test SP]

Jeff.Krug: /* Device Authentication */

2022-02-21T22:02:21Z

Device Authentication

← Older revision		Revision as of 22:02, 21 February 2022
Line 27:		Line 27:

	For the demo day, likely using the screenlock mechanism will be used unless additional devices are provided such as NFC based webauthn tokens or perhaps PIV-I card readers that work with mobile devices.		For the demo day, likely using the screenlock mechanism will be used unless additional devices are provided such as NFC based webauthn tokens or perhaps PIV-I card readers that work with mobile devices.

			== IDP Confirmation ==
			If your device supports a way to protect and authenticate to the IDP in future logins, you should get a registration successful message:

			[[File:success.png\|center\|Screen shot of successful registration.]]

			If your device doesn't support webauthn in a way that is compatible with the server you will get an error message like the following:

			[[File:fail.png\|center\|Screen shot of failed registration.]]

Jeff.Krug: /* Device Authentication */

2022-02-21T21:55:44Z

Device Authentication

← Older revision		Revision as of 21:55, 21 February 2022
Line 19:		Line 19:

	[[File:key1.png\|center\|Cell phone screen shot of using the devices security key.]]		[[File:key1.png\|center\|Cell phone screen shot of using the devices security key.]]

			In the above screenshot, the user would click "Get Started". Your device should hopefully have an equally intuitive option.

			Next you will be prompted to choose a method for using the key, essentially how the device will authenticate you and unlock the key on future use. This will also vary greatly from device to device in terms of the options available. And in some cases there will be no available mechanisms to use and an error may be generated. On a typical 2020 android device this next screen looks like this:

			[[File:key2.png\|center\|Cell phone screen shot of configuring the devices security key.]]

			For the demo day, likely using the screenlock mechanism will be used unless additional devices are provided such as NFC based webauthn tokens or perhaps PIV-I card readers that work with mobile devices.

Jeff.Krug: /* Device Registration */

2022-02-21T21:48:53Z

Device Registration

← Older revision		Revision as of 21:48, 21 February 2022
Line 14:		Line 14:
	# Put in any menaingful description for the the Device ID, such 'Tom Jane's iPhone'.		# Put in any menaingful description for the the Device ID, such 'Tom Jane's iPhone'.
	# Click <font style="background-color:#071A64;color:#FFFFFF;">Register device with WebAuthn</font>		# Click <font style="background-color:#071A64;color:#FFFFFF;">Register device with WebAuthn</font>

			== Device Authentication ==
			Upon clicking the button, your device should present you it's user interface for enabling authentication. This will vary by device, and while it may work on desktops, it's less often supported then it is on mobile devices. The initial screenshot on a typical 2020 android device looks like this:

			[[File:key1.png\|center\|Cell phone screen shot of using the devices security key.]]

Jeff.Krug: /* Device Registration */

2022-02-21T21:46:19Z

Device Registration

← Older revision		Revision as of 21:46, 21 February 2022
Line 13:		Line 13:
	# Put in ''testuser01'' for the Username.		# Put in ''testuser01'' for the Username.
	# Put in any menaingful description for the the Device ID, such 'Tom Jane's iPhone'.		# Put in any menaingful description for the the Device ID, such 'Tom Jane's iPhone'.
	# Click <style="background-color:#071A64;color:#FFFFFF;">Register device with WebAuthn</~~style~~>		# Click <font style="background-color:#071A64;color:#FFFFFF;">Register device with WebAuthn</font>

Jeff.Krug: /* Device Registration */

2022-02-21T21:45:42Z

Device Registration

← Older revision		Revision as of 21:45, 21 February 2022
Line 13:		Line 13:
	# Put in ''testuser01'' for the Username.		# Put in ''testuser01'' for the Username.
	# Put in any menaingful description for the the Device ID, such 'Tom Jane's iPhone'.		# Put in any menaingful description for the the Device ID, such 'Tom Jane's iPhone'.
	# Click		# Click <style="background-color:#071A64;color:#FFFFFF;">Register device with WebAuthn</style>
	{\| style="background-color:#071A64;color:#FFFFFF;"
	\|Register device with WebAuthn
	\|}

Jeff.Krug: /* Device Registration */

2022-02-21T21:44:44Z

Device Registration

← Older revision		Revision as of 21:44, 21 February 2022
Line 13:		Line 13:
	# Put in ''testuser01'' for the Username.		# Put in ''testuser01'' for the Username.
	# Put in any menaingful description for the the Device ID, such 'Tom Jane's iPhone'.		# Put in any menaingful description for the the Device ID, such 'Tom Jane's iPhone'.
	# Click {\| style="background-color:#071A64;color:#FFFFFF;" \|Register device with WebAuthn \|}		# Click
			{\| style="background-color:#071A64;color:#FFFFFF;"
			\|Register device with WebAuthn
			\|}

Jeff.Krug: /* Device Registration */

2022-02-21T21:44:20Z

Device Registration

← Older revision		Revision as of 21:44, 21 February 2022
Line 13:		Line 13:
	# Put in ''testuser01'' for the Username.		# Put in ''testuser01'' for the Username.
	# Put in any menaingful description for the the Device ID, such 'Tom Jane's iPhone'.		# Put in any menaingful description for the the Device ID, such 'Tom Jane's iPhone'.
	# Click ~~<div~~ style="background-color:#071A64;color:#FFFFFF;">Register device with WebAuthn~~</div>.~~		# Click {\| style="background-color:#071A64;color:#FFFFFF;" \|Register device with WebAuthn \|}